Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 6:13 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 4 posts ] 
Author Message
 Post subject: newbie question_sorry
PostPosted: Sat Mar 29, 2014 8:01 am 
Offline

Joined: Sat Mar 29, 2014 7:46 am
Posts: 3
I hope I can get a simple answer to a (really) simple question. I have a paid webmail account. The webmail provider supports YubiKey. I had a little issue which is now resolved, but which motivated me to get a Yubikey, which I now have. My trawling on the Webmail provider's forum, as well as here, has revealed to me that using Yubikey at home is not really necessary; it is most useful when 'in the wild'.
My questions are:
-can I use it at home anyway, and is there extra security from doing so?
-When I do use it at home, (or elsewhere), does the provider's SMTP server automatically 'see' it when it is touched/activated? Or do I have to set it up with the webmail provider.
-I could, I gather, just choose to use the Yubikey instead of my ever-so-cryptic password which I've been using (and changing from time to time). To me, this seems like a preferred method, even from home. This seems more secure. Is it?
Is there a youtube vid someone has done for old newbies like me? If so, would love the link.
Thanks for bearing with me. BTW, it looks like a snazzy little device. 8-)


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Sat Mar 29, 2014 8:07 am 
Offline

Joined: Sat Mar 29, 2014 7:46 am
Posts: 3
OK, I think I answered my own question, but was reluctant to try. Yes, I logged out. Went to login, put email name in, cleared P/W field, pressed YubiKey.---> Logged in. :oops: + :o + :D
Maybe this will be useful to another newbie sometime. This is all the functionality I need from it for now, as a private user.
There may be comments from experienced users that may be useful, and I'd be grateful.

~~~~~~~~~~
Ok, a step backwards. If I key in my new P/W by itself, I can log in. Have a feeling that the successful login was via the normal field auto-filling. I need to look at that.
If I drop down the login panel, expose the YubiKey field> touch~generate a OTP, can't login.
Can someone point out whether I should at all times be able to login via YubiKey OTP alone.


Top
 Profile  
Reply with quote  
PostPosted: Mon Mar 31, 2014 2:43 pm 
Offline

Joined: Tue Nov 04, 2008 8:55 pm
Posts: 19
Hi frailer5,

Whether you should be able to login with just the Yubikey alone is entirely up to the webmail provider. In most instances I would expect any system that implemented the Yubikey to require password and Yubikey (as you then get the "dual factor" security benefits). If you would like specifics it might help to mention the webmail provider as then someone here might be able to comment further.

I suspect there would be a slight improvement in security in using your yubikey at home as well but you will probably find that once enabled the Yubikey is always required.

Have fun!
Neal.


Top
 Profile  
Reply with quote  
PostPosted: Wed Apr 02, 2014 8:53 am 
Offline

Joined: Sat Mar 29, 2014 7:46 am
Posts: 3
Thanks Neal. Am using fastmail. Still feeling my way with the yubiKey, but shall get there...


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 13 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group