Today, cloud storage giant Dropbox announced to its more than 400 million users that it now supports FIDO U2F, including YubiKey security keys, for strong two-factor authentication.
On the company’s blog, Dropbox said users now can protect their files with U2F-powered devices in addition to the current feature of a one-time code sent to a mobile phone. U2F devices include YubiKeys, which enable high-security, public key cryptography to protect against advanced malware, phishing, and man-in-the-middle attacks.
FIDO U2F removes cost and complexity from traditional public key and smart card technology. U2F-powered YubiKeys can be purchased from the Yubico store or at Amazon.com. One single U2F device can access Google, Dropbox, WordPress and any number of U2F-compliant services. No client software or third-party services are needed, and no encryption secrets or information about users are shared between service providers.
The emerging open authentication U2F standards initiative was co-created by Yubico, Google and NXP, and turned over to the 200-member strong FIDO Alliance. Dropbox is the first major non-FIDO member to recognize the security advantages of FIDO U2F and offer those benefits to its customer base. FIDO membership is not a requirement for adopting FIDO U2F. The standards specifications for USB form-factor keys have been publicly available since December 2014, and the server code is free. Recently the FIDO U2F Technical Working group published specifications for NFC and Bluetooth transports for secure authentication mobile platforms. In addition, the FIDO Alliance announced today its latest round of products that have achieved FIDO certification. All U2F-compliant YubiKeys have earned the FIDO Certified designation.
Today, trillions of dollars are lost, and billions of internet users risk getting their online accounts hacked because of compromised static credentials. It’s encouraging that some great large-scale service providers are adopting technologies that represent the future of authentication — simple, open and secure, yet safeguarding your privacy.
The Yubico lineup supports FIDO U2F, and works out-of-the-box with services like Dropbox and many others. In addition to FIDO U2F, YubiKeys can support OATH One-Time Password, OpenPGP, and smart card (PIV) capabilities. For more information, see the YubiKey feature comparison chart.
Visit our Works With YubiKey catalog to find instructions on how to register a U2F-compliant YubiKey with your Dropbox account.
