Yubico Forum
https://forum.yubico.com/

newbie question_sorry
https://forum.yubico.com/viewtopic.php?f=26&t=1349
Page 1 of 1

Author:  frailer5 [ Sat Mar 29, 2014 8:01 am ]
Post subject:  newbie question_sorry

I hope I can get a simple answer to a (really) simple question. I have a paid webmail account. The webmail provider supports YubiKey. I had a little issue which is now resolved, but which motivated me to get a Yubikey, which I now have. My trawling on the Webmail provider's forum, as well as here, has revealed to me that using Yubikey at home is not really necessary; it is most useful when 'in the wild'.
My questions are:
-can I use it at home anyway, and is there extra security from doing so?
-When I do use it at home, (or elsewhere), does the provider's SMTP server automatically 'see' it when it is touched/activated? Or do I have to set it up with the webmail provider.
-I could, I gather, just choose to use the Yubikey instead of my ever-so-cryptic password which I've been using (and changing from time to time). To me, this seems like a preferred method, even from home. This seems more secure. Is it?
Is there a youtube vid someone has done for old newbies like me? If so, would love the link.
Thanks for bearing with me. BTW, it looks like a snazzy little device. 8-)

Author:  frailer5 [ Sat Mar 29, 2014 8:07 am ]
Post subject:  Re: newbie question_sorry

OK, I think I answered my own question, but was reluctant to try. Yes, I logged out. Went to login, put email name in, cleared P/W field, pressed YubiKey.---> Logged in. :oops: + :o + :D
Maybe this will be useful to another newbie sometime. This is all the functionality I need from it for now, as a private user.
There may be comments from experienced users that may be useful, and I'd be grateful.

~~~~~~~~~~
Ok, a step backwards. If I key in my new P/W by itself, I can log in. Have a feeling that the successful login was via the normal field auto-filling. I need to look at that.
If I drop down the login panel, expose the YubiKey field> touch~generate a OTP, can't login.
Can someone point out whether I should at all times be able to login via YubiKey OTP alone.

Author:  Neal [ Mon Mar 31, 2014 2:43 pm ]
Post subject:  Re: newbie question_sorry

Hi frailer5,

Whether you should be able to login with just the Yubikey alone is entirely up to the webmail provider. In most instances I would expect any system that implemented the Yubikey to require password and Yubikey (as you then get the "dual factor" security benefits). If you would like specifics it might help to mention the webmail provider as then someone here might be able to comment further.

I suspect there would be a slight improvement in security in using your yubikey at home as well but you will probably find that once enabled the Yubikey is always required.

Have fun!
Neal.

Author:  frailer5 [ Wed Apr 02, 2014 8:53 am ]
Post subject:  Re: newbie question_sorry

Thanks Neal. Am using fastmail. Still feeling my way with the yubiKey, but shall get there...

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/