Stop account takeovers

The key to truly secure MFA

Modern and secure authentication to protect
against account takeovers

Stop account takeovers and phishing

Fraudsters and hackers are getting smarter and more sophisticated. Account takeovers and breaches were up a whopping 424% in 2018 despite companies spending hundreds of billions of dollars to strengthen their cybersecurity postures.

Many organizations have successfully eliminated account takeovers with the YubiKey. Even if a user is tricked into giving up their personal info, the YubiKey isn’t fooled. User credentials are built on strong public-key cryptography and bound to the service, offering account takeover protection by ensuring that only the real site can authenticate with a key.

Make existing security solutions stronger

Passwords offer little if any protection against account takeovers. Research by Google, NYU, and UCSD based on 350,000 real-world hijacking attempts has proven that on-device prompts, secondary emails, SMS codes and phone numbers aren’t as effective as a security key in preventing targeted attacks.

Using strong public key cryptography, Yubikey strengthens security for 2FA and MFA, and makes passwordless a reality by requiring a physical key as the authentication controlling factor.

Offer the best user experience

SMS codes, one-time passwords, and mobile push authenticators all require additional cumbersome steps while not being very secure. Waiting for and typing in one-time codes, or going through extra steps creates user fatigue and decreases workforce productivity and MFA adoption.

With YubiKeys, users login with a single touch or tap. They don’t require connectivity to work and are always available and ready for authentication. Strong hardware-based security is combined with an intuitive user experience that’s 4 times faster than SMS.

Case in point


Facebook balances security and usability

Situation:

Facebook’s access to the personal information of billions of people has made it a highly valuable target for cyberattacks. As a part of Facebook’s ongoing security strategy, their engineering team wanted to implement strong two-factor authentication (2FA) for their development environment. The solution needed to scale to thousands of developers, and enable seamless security without interrupting workflow.

YubiKey Solution:

Facebook chose the YubiKey, which was deployed to thousands of developers within a matter of months. Once the engineering team proved the YubiKey could meet all of their complex requirements, Facebook deployed YubiKeys across the entire company.

The Result:

Facebook deployed YubiKey-enabled 2FA, protecting every single SSH access instance, email systems and VPN. In addition to employees, Facebook also supports YubiKey authentication to help billions of users prevent fraud, account takeovers, and data theft from highly persistent attackers—helping to ensure the platform’s integrity and security for everyone who uses Facebook every day.

“Protecting against remote attackers is a constant challenge, because once they gain access, they can move laterally through the organization to get the data they want. We wanted a 2FA solution to prevent that lateral movement, so if an engineering laptop gets compromised, the attackers can’t pivot into the production environment and access critical data”
John “Four” FlynnInformation Security Manager, Facebook Inc.

Get Started

YubiKey 5 series
Find the right YubiKey

Contact our sales team for a personalized assessment of your company’s needs.

Get protected today

Browse our online store today and buy the right YubiKey for you.


Recommended content

Computer with multiple keyboards

Examining the CISO agenda in 2021

CISOs are paid to worry, and there’s a lot to worry about in 2021. The recent SolarWinds breach, the Capitol break-in, and a series of high-profile hacks are spurring many enterprises to re-examine their security strategies. We discuss what lies ahead with Yubico’s CISO, Chad Thunberg. Q: What’s top of mind for CISOs in 2021? The SolarWinds

SIM Swap Protecting Against Account Takeover with WebAuthn

Billions of dollars are being stolen annually due to account takeover fraud.

Data Breach

Data breaches by the numbers Proven protection in the most challenging environments

Enable secure privileged access management

Modern privileged access management Privileged access management is critical, as these users are prime targets for cybercriminals. The YubiKey ensures that all privileged users follow a higher bar of security, in turn protecting organizations from account takeovers.