As holiday revenues grow, so does the temptation for criminals to take a part of the action for themselves – over […]The FIDO2 application allows for secure single and multi-factor authentication, and can store up to 25 resident credentials. Copy this key to a file for later use. Multi-protocol security key, eliminate account takeovers with strong two-factor, multi-factor and passwordless authentication, and seamless touch-to-sign. The YubiKey 5 series can hold up to 32 OATH credentials and supports both OATH-TOTP (time based) and OATH-HOTP (counter based). 0 interface as well as an NFC. It’s a known issue, and Yubico recommends users to swipe the screen or press any key rather than tapping the YubiKey. 2in (12 x 40. 2. Right click on the YubiKey Smart Card and select Properties. Open the Settings app. Threat actors often target over-privileged accounts to gain unauthorized access, exfiltrate sensitive data, introduce malicious activity, or engage in other forms of. ago • Edited 1 yr. However, Yubikey also provides methods to recover your account, so you can get a replacement. Simply plug in via USB-C to. Passkeys are built on the WebAuthentication (or "WebAuthn") standard, which uses public key cryptography. We will need them to set up the individual accounts we each have. If you are running this from a non-Administrator account, you will be. Secure all services currently compatible with other. 35mm. The YubiKey is designed to be a user authentication or identification device. MFA is an authentication method in which a computer user is granted access only after successfully presenting two or more pieces of evidence, or factors, to an authentication mechanism. This is great. In reply to PaulKingtiger's post on October 7, 2017. Yubico Authenticator adds a layer of security for online accounts. Notably, the $50 5 Nano and the $60 5C Nano are designed to sit semi. 3 or later, or a Mac on macOS Ventura 13. Two-factor auth (often abbreviated as 2fa) can by physical as well. The Yubico Authenticator works like other time-based OTP apps with one major. The 5th generation YubiKey has arrived! Our new YubiKey 5 Series is comprised of four multi-protocol security keys, including two much anticipated new features: FIDO2 / WebAuthn and NFC (near field communication). Support Services. In case of FIDO2 key the PIN is used to protect your secure hardware token, not your account. Turn cookies on or off. A YubiKey is a brand of security key used as a physical multifactor authentication device. yubico. To provide social proof, YubiKey is implemented as a countermeasure for account takeover across some of the world’s largest companies to included Google, Facebook, Salesforce, and even the US. For example, Windows and Mac OS user accounts don’t support One Time Password, so you have to use a traditional static (unchanging) password. Note that plugging in your YubiKey requires you to also physically touch the key. Click on your name at the top of the navigation pane on the left, then pick Password & Security and click Add next to the Security Keys heading. YubiKey Bio - FIDO Edition. Open the Settings app. That's even more of a reason to use separate accounts. Google account 2FA only with HW security key?. A whole host of online companies support two-factor authentication with YubiKey, including Google, Apple, Dropbox and many more. Yubico. Each YubiKey comes with a hole designed to keep it handy on your. on the server in ad change settings on the user account to require a smart card to login. That will show you all the accounts set up for 2FA (TOTP). All current TOTP codes should be displayed. com is the source for top-rated secure element two factor authentication security keys and HSMs. See full list on support. FIDO-only protocols: Security Key Series is the more affordable security key supporting only FIDO2/WebAuthn (hardware bound. Think of a time when you have created a new account and didn’t have to create a new password. From there, go to Settings, then Security. After inserting the YubiKey into a USB Port select Continue. Solutions. We hope that you will not lose your YubiKey, but for larger deployments and serious use, establishing processes around lost YubiKeys is an important and challenging aspect. Once 2FA is activated by the administrator within UserLock, enrollment for using the YubiKey is. But, if you use WebAuthN as a factor type, you should be able to enrol the same YubiKey to same users. Max no. Its compatibility with USB-C devices ensures seamless connectivity, and it supports various authentication protocols and services. YubiKey 5 Series. However, having two connectors will cost you, as the YubiKey 5Ci costs slightly more than other YubiKey 5 series keys. These enhancements allow users to review FIDO2 discoverable credentials on their YubiKey and delete individual credentials without requiring a full. The YubiKey supports one-time passcodes (OTP) OTP supports protocols where a single use code is entered to provide authentication. Yubikeys are a type of security key made by Yubico that makes two-factor authentication easier. 2 answers. The applications on the YubiKey hardware are limited to contain only authentication secrets and keys either generated internally or loaded by users; none of the functions on a YubiKey are designed for mass storage of data. . The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO. 3 and above so that the user can act upon them. The Yubico PIV-Tool was designed to interact with and manage the PIV functions alone. Trustworthy and easy-to-use, it's your key to a safer digital world. Compared to the. The versatile, multi-protocol YubiKey 5 series is your solution. Read the YubiKey 5 FIPS Series product brief >. It’s compatible with USB-A and NFC connections and costs only $45. For registering and using your YubiKey with your online accounts, please see our Getting Started page. Different browsers support different security keys. 3. The key gives you a dedicated keyfob. Plug your YubiKey into the additional Macs and follow steps 6-9 in the “Pairing your YubiKey with macOS” section to complete the pairing process. In the upper-right corner of any page, click your profile photo, then click Settings. My web site host alone has 3 different logins. YubiKey 5 CSPN Series. Generate 2-step verification codes on a mobile or desktop device and apply cross platform. Windows cannot write credentials to the. Activating it types out your password and “presses” enter at the end. 2. This takes our two-factor authentication even further, preventing even an advanced attacker from obtaining a user’s second factor in a phishing scam. g. When you set up TOTP 2FA, the service gives you a secret key, which is a randomly generated password, that you and the server know. our Windows 10 PC and then enrolling each one with a Google account. config/Yubico/u2f_keys. For more information on why this happens, please see The YubiKey as a Keyboard. Once done, test your key. That being said, as a next step we would encourage you to check with Apple Support on this as well regarding this issue. Learn how you can set up your YubiKey and get started connecting to supported services and products. Works with YubiKey catalog YubiKeys, the industry’s #1 security keys, work with hundreds of products, services, and applications. Log in with your Microsoft account. Our newest version adds a layer of security for your online accounts that require Time-based One-Time Passwords (TOTP). The PIV (Personal Identity Verification) standard specifies 25 slots. Configuring User. Additionally since the TOTP accounts are in the Yubikey itself when you move the key to another computer the TOTP entires follow the key. Easily generate new security codes that change periodically to add protection beyond passwords. While the YubiKey Bio with USB-A costs $80 (around £58), the YubiKey Bio with USB-C costs $85 (around £62). Step 2: Plug in a YubiKey 5Ci. Note that some services call two-factor authentication two-step verification. DaveM121. Edited. USB-A. This has two advantages over storing secrets on a phone: Security. The new YubiKey retails for $55 and can be used to log into any Windows, Mac, Linux, Android or iOS device that has either a USB-C port (such as most modern laptops, Android phones and iPad Pros. This enables users to have FIDO-based authentication to websites. One of the most common keys is the YubiKey. If you're not sure which slot to use, use slot 1. The double-headed 5Ci costs $70 and the 5 NFC just $45. Browse the YubiKey compatibility. . Biometric. Each YubiKey must be registered individually. ”. Depending on the firmware version of the YubiKey, its PIV application will have 5, 25, 26, or 28 slots. gpg --generate-full-key. Reply madjam002 • Additional comment actions. The YubiKey 5Ci is a dual connector (Lightning and USB-C) security key meant to act as a unified security solution across both desktop and mobile devices. a. com From the Yubikey specs page: OATH. Yubico OTPs can be used for user authentication in single-factor and two-factor authentication scenarios. Select Next. That's even more of a reason to use separate accounts. The YubiKey C Bio is an excellent melding of Yubico's design philosophy and biometric authentication. Check the Authenticator box. 25 FIDO2 Resident Credentials (pretty specific use case for this) 1 of the following (YubiOTP, HOTP, Challenge/Response, Static Password) another 1 of the following (YubiOTP, HOTP, Challenge/Response, Static Password) There are only 3 key slots, but. GTIN: 5060408461969. Free delivery and returns on eligible orders. "Works With YubiKey" lists compatible services. Yubikey can be used for true two factor authentication on windows using rohos software and setting it up for challange key on slot one. #1. I re-added the Yubikey. The YubiKey 5 series can hold up to 32 OATH credentials and supports both OATH-TOTP (time based) and OATH-HOTP (counter. Maybe 150 for me, and 25 for family members. Google Case Study. All Yubico’s products - YubiKey 5 Series, YubiKey Bio Series and. There are also command line examples in a cheatsheet like manner. Use Yubico Authenticator for Android with YubiKey NEO devices and your Android phones that are NFC-enabled. We highly recommend disabling SMS after a security key and authenticator app are enabled to ensure maximum security. Yubico - YubiKey 5C NFC - Two-Factor authentication (2FA) Security Key, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts $55. Resources. Create a Google Account. If you want to use your YubiKey with multiple accounts, you’ll need to add each account to the key. If an account you added uses HOTP, or if you set the TOTP account to "require touch", you will first have to tap the credential (and then tap the gold YubiKey contact, if prompted) to display the current code. Add a Certificates snap-in for My User account: in the console tree, expand the Personal store, and then click Certificates. Yubico. Just be aware there's a limit, I think it's max 20 or 25 keys. 5. The YubiKey 5C provides strong and reliable two-factor authentication, offering secure protection for online accounts. To use the YubiKey as a Smart Card on iOS feature as shown in the demo, you must have the following (all prerequisites are discussed in the Yubico guide here ): Apple iPhone or iPad (Lightning. YubiKey personalization tools. Depending on your favorite browser, you can easily find a security key that it supports. ” (image courtesy of Apple. It works like Authy, giving you 6 digit one time passcodes, but in order to use it you need to plug in your YubiKey. For that, it's excellent. The YubiKey Security Key C NFC is pretty simple to set up – at least, on some devices. YubiKey 5 NFC. Convenient and portable: The YubiKey 5 NFC fits easily on your keychain, making it convenient to carry and use wherever you go, ensuring secure access to your accounts at all times. Two types of discoverable FIDO credentials enable passwordless authentication; copyable or hardware bound. Next to the menu item "Use two-factor authentication," click Edit. This document describes how to use both tools. websites and apps) you want to protect with your YubiKey. (Customer) awesome. Multi-factor authentication (MFA) can greatly enhance security while delivering a positive user experience. Notably, the $50 5 Nano and the $60 5C Nano are designed to. Passkeys are like passwords, but better. If you have entered the PUK wrong several times you’ll need to reset the whole yubikey. YubiKeys are also easily re-programmed, making them suitable for rotating-shift and temporary workers. Visit the Yubico Store. I am not worried much about the totp-32 limit. A YubiKey is the ultimate line of defense against having your online accounts taken over. Security key. *The YubiKey FIPS (4 Series) and YubiKey 5 FIPS Series devices, when deployed in a FIPS-approved mode, will have all USB interfaces enabled. The theoretical limit is higher than the practical limit. The protocol is designed to act as a second factor to strengthen existing username/password-based login flows. Convenient and portable: The YubiKey 5C fits easily on your keychain,. Text only. Financial stuff, about 10 right there. Close the settings. Accessing this applet requires Yubico Authenticator. FIDO2 supports not only today’s two-factor authentication but also paves the way for eliminating weak password authentication, with strong single factor hardware-based authentication. What else is good about the YubiKey is that: It protects you from phishing. YubiKey. The YubiKey 5 Series is a hardware based authentication solution that offers strong two-factor, multi-factor and passwordless authentication with support for multiple protocols including FIDO2, U2F, PIV, Yubico OTP, and OATH TOTP. Step 6: When you are satisfied with the settings, to add the YubiKey as a credential, click Add. If a cert is bigger than 3,052 bytes, the YubiKey will reject it and the SDK will throw an exception. I'm not OP, and I only have TOTP on about 10 accounts, but I have about 175 accounts in my password manager. losing your phone), you’ll have a second option to use to get access to your account. FIDO: FIPS 140-2 with YubiKey 5 FIPS Series. If the phone does not read anything from the YubiKey/does not make a confirmation noise, try setting the NDEF slot for NFC usage and try these steps again. At $70, the YubiKey 5Ci is the most expensive key in the family. Type "Secure Office 365 account" and click Get Help. This links the primary YubiKey QR code and the primary YubiKey to the account. Depends on which key you have but the 5 has I think a limit of 32 accounts. The practical limit I've been told by some Google tech-savvy product folks is around 10 keys. It will work with just about every account that. Or simply "turn on" Apple's version but "what" it is for is probably much higher. Step 3: Locate the authenticator code from your Yubico Authenticator. The secrets always stay within the. This physical layer of protection prevents many account takeovers that can be done virtually. Add your credential to the YubiKey with touch or NFC-enabled tap. No. Our lead engineer, Dain Nilsson, has written a whitepaper that goes into detail on this YubiKey function. The YubiKey Bio Series is available for purchase on yubico. It’s not a centralized service that can be hacked. When logging into an account with a YubiKey registered, the user must have the account login credentials (username+password), and the YubiKey registered to the account. Step 3: Locate the authenticator code from your Yubico Authenticator. Plug in a YubiKey 5Ci. To use an enrollment agent to generate a . x YubiKey, but once the total size limit is reached, the YubiKey won't be able to store any more, even if. Learn how using YubiKey products with Microsoft accounts can provide the highest level of two-factor authentication and protection on all major devices. The Yubikey 5C NFC is $55 and comes with both NFC and USB-C. You can disable security codes by going to my accounts -> profile & settings -> security code and disabling there. Defense against account takeovers. The number one method for stealing credentials is through phishing attacks. This appears to be the only method available to prevent users from setting their PIN to 1234 or any of the. Wednesday September 9, 2020 4:00 am PDT by Juli Clover. In addition to mobile authentication and Token2, UserLock now partners with Yubico to offer companies the chance to use YubiKeys to protect their Windows Active Directory users. Default is 12345678. The Yubico OTP is based on symmetric cryptography. Use our phishing-resistant passwordless MFA solution to secure your on-premise and cloud resources. via USB C on desktop or via NFC on the android application. Remove your YubiKey and plug it into the USB port. It uses the OATH-TOTP protocol to do this. Shipping and Billing Information. I suspect anyone with a US deposit account is covered, so long as their bank is Member FDIC (most are). Note: How the YubiKey works- 1. Tap your name, then tap Password & Security. This Yubico support article mentions 3 ways to deploy YubiKey Smart Cards in an AD environment: Smart Card Login for User Self-Enrollment (also illustrated in this Youtube video ); Smart Card Login for Enroll on Behalf of; Smart Card Deployment: Manually Importing User Certificates. It’s a robust, affordable “key to many locks” that stays with you as your technology and threats change. Register your YubiKey- To use the YubiKey, go to the security settings of a supported service and select two-factor authentication. To remove a FIDO2 key associated with a user account, delete the key from the user’s authentication method. 5 out of 5 stars 1,400 ratings. Step 3. Setting up your YubiKey is easy, simply pick your YubiKey below and follow our guided tutorials to get started protecting your favorite services. Discover the simplest method to secure logins today. You are then prompted for an authenticator code. This works by just tapping the YubiKey NEO to the back of your phone. Paul Martin Hi Paul! Your same key can be used across multiple accounts, and you only need to register it one time. Using Your YubiKey as a Smart Card in macOS; Using Your YubiKey with Authenticator Codes; YubiKeys for Duo - Manual Configuration Programming Process; Phishing-Resistant. If you haven’t set up a PUK and created certain auth methods you cannot enter/change/use the PUK at all, you always have to set it up beforehand. . YubiKey Bio. SECURITY KEY: Protect your online accounts against unauthorized access by using 2 factor authentication with the Yubico YubiKey 5 Nano security key - the world's most protective USB security key that works with more online services/apps than any. Yubikey 4 FIPS has a worse support for OpenPGP. open-source; yubico services; Protecting vulnerable organizations. The Information window appears. The YubiKey was created to make stronger authentication available and easy to use for all. When the accounts are disabled, then the associated YubiKey cannot be used to access company resources. For other, less sensitive accounts, you can still use the Yubikey if you like as a TOTP device (just like a regular QR-code scanner app like Google Authenticator/Microsoft Authenticator). The Yubico YubiKey 5 NFC is a tiny, USB device that keeps the bad guys out of your accounts by adding a secure second factor to your login process. Enter Master Password and click Continue. Access to Password Manager across devices Storage sync across devices Secure password generator Self-hosting option - Encrypted export Bitwarden Send. YubiKey 5 FIPS Series Specifics. Secure your online accounts with YubiKey 5Ci by Yubico, sold by MKBSecurity B. Multiple form factors with support for USB-A, USB-C, NFC and Lightning. But I don't get prompted for "Touch the USB" :-( I'm only offered PIN or Password after I've locked the PC. Physical Specifications Form Factor. In many cases, it is not necessary to configure your. It appears they listened to us. It’s built on Yubico’s invention of a scalable public-key model in which a new key pair is. It doesn't prompt me to insert my key. If you lose access to your primary authentication method (e. 5% range. Downloads. Yubico SCP03 Developer Guidance. Convenient and portable: The YubiKey 5 C NFC fits easily on your keychain, making it convenient to carry and use wherever you go, ensuring secure access to your accounts at all times. Two-factor authentication with ssh key authentication and yubikey? OpenSSH won't invoke PAM at all if public key (RSA) authentication is configured and the client presents a valid key. The TOTP entries are actually physically on the key, after a fashion, and so the physical Yubikey must be attached to the machine you want to see the TOTP codes on in the Yubico app. Scan the QR code with your mobile device's app. Someone changed your password. Report abuse. Near Field Communication (NFC) Keep your online accounts safe from hackers with the Security Key by Yubico. Verifying OTPs is the job of the validation server, which stores the YubiKey's AES. USB-C. The latest post asking this was in march 2021 and the answer was no back then but i was wondering if anything has changed. If you're using the FIDO2 apsect of it those don;t show up in the list I think. Either use style can help you avoid phishing attacks, and the YubiKey Bio can be used with a wide range of applications and services, including 1Password, Google Chrome, Microsoft accounts. Just ensure that the supported key. For users who opt in, Security Keys strengthens Apple’s two-factor authentication by requiring a hardware security key as one of the two factors. $75 USD. No. Use security keys and Pin instead of passwords to access your Microsoft accounts for easy access to Outlook, Microsoft Office and other internet apps. upn: Each user’s User Principal Name from Azure AD serial number: A unique identifier, recommend using the serial number of the YubiKey secret key: A randomly generated OTP secret. IMP: Register and test a second key as a backup. The Yubikey brand has been around for a while, but the reason they're starting to become "hip" as of late is because of two specifications making such devices suddenly very conveinient to use on the web: U2F (2014, supported by the Yubikey 4 and up) and WebAuthn (2017, fully-supported by the Yubikey 5 but backwards-compatible with U2F. . Click Use a mobile app, and you’ll see a QR code. ). Make sure the service has support for security keys. Overall, the YubiKey 5 NFC is an excellent choice for anyone looking to improve the security of their online accounts. ago. Both keys are working properly for login to my Mac Studio, asking for. Trustworthy and easy-to-use, it's your key to a safer digital world. 8 billion users by integrating the unphishable protection of the FIDO U2F Security Key into its social platform. Keep your online accounts safe from hackers with the YubiKey. The versatile, multi-protocol YubiKey 5 series is your solution. “The YubiKey is a hardware authentication device manufactured by Yubico to protect access to computers, networks, and online services that supports one-time passwords (OTP), public-key cryptography, and authentication, and the Universal 2nd Factor (U2F) and FIDO2 protocols [1] developed by the FIDO Alliance. Step 3: Insert your YubiKey, at the prompt when Authenticator restarts. Older iPhone models, most iPads, and some iPods will work with the YubiKey 5Ci through its Lightning connector on select apps and browsers. Manage your Location History. Yes. 59 x 0. However, a YubiKey cannot be used in conjunction with signing into your computer using a Microsoft Account. 2. For this example we’re going to have the following setup:. Instead of having multiple keys for one account, all you need is KeepassXC as TOTP and password management. Click to unlock settings. All current TOTP codes should be displayed. Step 1: In the Windows Start menu, select Yubico > Login Configuration. A physical hardware key is one of the most secure. There are limitations with the YubiKey in terms of supported accounts. The Yubico YubiKey Bio does one thing very well: It protects your online accounts with biometric multi-factor authentication. Both are described below. . Review the devices associated. Next, to create a spare key for this account, you will need to scan the same QR code generated from the initial registration and then scan your spare. Where the YubiKey 5 NFC shines is near-universal protocol support, meaning you aren't likely to find a website or service that doesn't work with it in some fashion. Yubico and Microsoft Introduce Passwordless Login. 0 Female Adapter Compatible with iPhone 15 Pro Max MacBook Air Pro iMac iPad mini Dell. Download the Yubico Authenticator App. Administrator registration (alternative method) An Azure AD administrator can register and assign a YubiKey to users’ accounts. The Information window appears. I was wondering if any banks worth using (so not bank of america) have implemented yubikey as of yet. Find. 2. Trustworthy and easy-to-use, it's your key to a safer digital world. Given physical access to an unencrypted laptop, an evil maid attack is. Well, today, a HUGE thumbs up has happened — Facebook has upgraded the login security for its 1. Under category, select "Manage account security". But there is nothing which clearly indicates this within Google settings and the workflows look basically the same. The YubiKey is a more secure way to log into your online accounts, or even your PC. Account name - Name of the account holder; Require touch - Toggles the requirement to touch the YubiKey (thus demonstrating user presence) in order to display the OATH or FIDO code. From here, you insert the YubiKey 5C NFC into your phone, enter a few memorized numbers, and the YubiKey 5C NFC will fill out the other 32 characters. 168; asked Aug 11, 2015 at 8:57. Step 2: Scan your primary YubiKey. OATH is an organization that specifies two open authentication standards: TOTP and HOTP. A YubiKey 5 Series key (5Ci, 5C NFC, or 5 NFC). Yubico always recommends adding two keys to each of your online services and accounts; one primary and one secondary as backup in case the primary is lost. Scroll down until you see the security key option, and hit “Add Security Key. The client can display each credential’s relying party information and credential descriptor, as well as the number of discoverable credentials on the authenticator. The Nano model is small enough to stay in the USB port of your computer. Objectives. Google) via the key handle, or in the case of Yubico, to store a MAC and nonce as the key handle. Step 2: Apply the permissions, quit Yubico Authenticator application and restart it. Under "Security Keys," you’ll find the option called "Add Key. YubiKey 5Ci and 5C - Best For Mac Users. Have not installed the Authenticator because I. Account name - Name of the account holder; Require touch - Toggles the requirement to touch the YubiKey (thus demonstrating user presence) in order to display the OATH or FIDO code. Select Authentication methods > right-click FIDO2 security key and click Delete. I have two YuibKey 5 NFC keys I've been setting up. The YubiKey 5 NFC uses a USB 2. This is done by providing an improved version of 2FA - two-factor authentication - to all of your applicable online accounts. Confused about this because when I added this key to my hotmail account. By the way, the unlimited-identities thing is possible because the web site hands the client browser a blob of data encrypted so that only the Yubikey can decrypt it. We do recommend registering a backup key wherever possible just in case you lose you primary key. The YubiKey is a hardware authentication device manufactured by Yubico to protect access to computers, networks, and online services that supports one-time passwords (OTP), public-key cryptography, and authentication, and the Universal 2nd Factor (U2F) and FIDO2 protocols [1] developed by the FIDO Alliance. On iPhone or iPad. Yubico Authenticator. To put it in a very short and simple manner, YubiKey is a small device manufactured and sold by the company Yubico. Trustworthy and easy-to-use, it's your key to a safer digital world. Two-step Login via YubiKey. To find out if an application is compatible with the YubiKey Bio - FIDO Edition, browse to the Works With YubiKey Catalog, and in YubiKey drop-down, select YubiKey Bio Series to only display services that are compatible with it. 9. Related YubiKey Security token Peripheral Computer hardware Computer Information & communications technology Technology forward back r/ProtonMail Official subreddit for Proton Mail, Proton Mail Bridge, and Proton Calendar. Any YubiKey that supports OTP can be used. Keep your online accounts safe from hackers with the YubiKey. There are two ways to identify your key. Configuring Multi-factor Authentication (MFA) in IAS Enforcing a second factor for authentication can be configured in Identity Authentication in two – or even three – different ways:YubiKey 5Ci. Yubico sells models with USB-A, USB-C, Lightning and NFC connections. From there you should be able to find an option for 2FA/MFA, or adding security keys. Authenticating with username and password alone is no longer sufficient. Keep your online accounts safe from hackers with the YubiKey. A YubiKey is a key to your digital life. Passkeys are discoverable FIDO credentials that enable users to authenticate to websites without a password. Multi-protocol. It is certainly possible to store several 3,052-byte certs on a 5. (if you do this option set up 2). For businesses with 500 users or more. All you will need to do is download the app on a desktop or mobile device, plug in or scan your key, and you are able to access to all the codes on it. Multi-Factor Authentication.