3 ms·
This product does not make your fingerprint into a password. The fingerprint is a third factor. Your password is the first. The physical key is the second. And
by theptip 7y ago
This product does not make your fingerprint into a password.
The fingerprint is a third factor. Your password is the first. The physical key is the second. And the fingerprint is the third.
If your fingerprint is compromised, this system reverts to the security of a 2FA system with a normal physical token (i.e. very strong).
- tialaramex 7y agoYour understand that in this flow the password isn't used right? You plug the key into the Windows PC, and you put your fingertip on the sensor and you're signed in. That's two factors, "Something you have" and "Something you are" not three.
- djsumdog 7y agoBut that's not how must Yubikey flows are implemented. For an AWS console, you sign in with a username and password, then tap the contact on your Yubikey. The only difference here is that the key now only works with your finger print and not any random person's.
- tialaramex 7y agoYou're correct, that's not how most flows are implemented. But it is the new flow enabled by this device. For your AWS sign in obviously it won't need a fingerprint and so it'd be kind of silly for the demo to be "this more expensive product works like the older cheaper product you already have" they wanted to show off the new feature which is the "resident credential" user verification mode.