FAQ
Frequently asked questions are answered here.
If you have any further questions, please feel free to contact us!
General
What does two-factor authentication or multi-factor authentication mean?
Two-factor authentication (2FA) is a security mechanism that uses two different identity credentials to verify the user's identity. For example, it can be a combination of a password and a one-time password (OTP) generated via SMS or through an authentication application. Multi-factor authentication (MFA) extends this concept by requiring more than two identity credentials, such as biometrics or physical security tokens. By using multiple factors, both 2FA and MFA increase security and make it more difficult for potential attackers to gain unauthorized access.
Why password-based security is no longer enough?
Protection via password alone is no longer sufficient, as passwords are often weakly chosen or reused, posing a security risk. In addition, passwords can be compromised through phishing or hacker attacks. The use of additional security measures such as two-factor authentication (2FA) or multi-factor authentication (MFA) increases security by requiring multiple proofs of identity to grant access. This reduces the likelihood of a successful attack and strengthens overall protections.
Why can't multi-factor authentication be missing?
Multi-factor authentication (MFA) should not be missing because it provides an additional layer of security to protect user accounts and data from unauthorized access. Using multiple proofs of identity such as passwords, one-time passwords or biometrics significantly reduces the likelihood of a successful attack. MFA increases security and protects against password theft, phishing attacks, and other attack methods that target single factor possession.
What will secure authentication of the future look like?
The secure authentication of the future is expected to be a combination of factors, including biometrics such as fingerprints, facial recognition or iris scans. In addition, advanced artificial intelligence technologies will be used to detect suspicious behavior and monitor anomalies in real time. The development of password-free solutions that dispense with strong passwords and instead use more secure methods such as public-key cryptography and hardware tokens will also be part of future secure authentication.
YubiKey
What is a YubiKey?
A YubiKey is a small security token that enables secure two-factor or multi-factor authentication with a simple touch. YubiKeys are robust enough for the largest enterprises, yet simple and easy to use for anyone. The tokens support FIDO U2F, (Yubico-OTP), OATH-OTP, OATH-HOTP, OATH-TOTP, OpenPGP and PIV. One key can be used for an unlimited number of applications. No drivers, client software or batteries are required. Depending on the key, both contact (USB) and contactless (NFC, MIFARE) communication is possible.
What is a One-Time Password (OTP)?
A One-Time Password (OTP) is a temporary password that is used only once for a specific transaction or authentication. It provides additional security because it becomes invalid after use and cannot be reused. OTPs are often used in conjunction with two-factor authentication (2FA) and multi-factor authentication (MFA) to provide an additional layer of security and secure access to accounts or systems.
Is it possible to upgrade the security token firmware?
No, this is not possible. For security reasons, the security token does not allow access to the firmware.
What happens if I lose my security token?
We recommend that you keep a second USB token as a backup.
My YubiKey does not work. What can I do?
Please follow the steps below and then contact our support by mail or phone to describe the problem:
- Check if you have inserted the security token into the USB port correctly
- Check another USB port of your computer and if possible another computer
- Open a text editor and press the security token
- Check the display (if available)
FIDO
What is FIDO?
FIDO (Fast Identity Online) is an open standard designed to improve the security and usability of online authentication. It is based on the use of public-key cryptography and enables strong authentication across different platforms and devices. FIDO enables users to securely and conveniently log in to multiple services without relying on passwords and provides an interoperable solution for enhanced security.
Can I use one security token for multiple services that FIDO supports?
Yes, depending on which FIDO protocol the service, such as Google or Dropbox, uses and the security token supports.
Which browser supports FIDO?
FIDO supports all major browsers, such as Google Chrome, Mozilla Firefox, Microsoft Edge, and Apple Safari.