Yubico Forum

After seeing this post: viewtopic.php?f=23&t=788

I wonder what I have to do to prevent the disabling of the yubico login?

Does harddisk encryption (bitlocker/veracrypt) solve the issue?

Your local Windows logon is designed to keep away your friends and family from your account, not an experience attacker who has physical access to your machine.

If you want to use hard drive encryption you can use BitLocker but this solution has little to do with Operating System logon. Encryption, if done properly it is the only way to protect your data, along with a security proactive attitude in life (eg. do not stick your password on a post-it next to your workstation)

There are many hard drive encryption solution out there, i leave to others to evaluate which is the best.

Thanks for your reply.

I am aware (and I should have stated so) that the U2F windows logon protection is not a 100% protection from intrusion by someone who has physical access to the machine. My question was rather if there are ways to prevent specifically (and only) the 2 methods mentioned in the other forum post.

Regarding the HD encryption, I was wondering if the HD encryption would prevent an intruder from changing the registry as described in the other forum post.
Which software is better is of course a completely different matter.