Wiki source code of YubiKey Set-Up And Use: Two Factor Authentication Using Hardware (YubiKey) To Secure Google, Bitwarden, LastPass
Last modified by Doug Sargent on 2026/08/19 16:32
Hide last authors
| author | version | line-number | content |
|---|---|---|---|
| |
5.1 | 1 | {{toc depth="7" start="1"/}} |
| 2 | |||
| |
2.1 | 3 | === {{id name="Overview"/}}**Overview** === |
| 4 | |||
| |
20.1 | 5 | Your **YubiKey** is the size of a thumb (flash) drive and plugs into the same place (USB port) on your laptop. |
| |
1.1 | 6 | |
| 7 | [[image:attach:securitykeyanfc-keyring.jpg||original-height="500" data-xwiki-image-style-alignment="center" original-width="600"]] | ||
| 8 | |||
| 9 | Pressing or tapping button is done with a light touch especially when plugged into a port. | ||
| 10 | |||
| 11 | [[image:attach:yubikey-5-tap-720x720_1_3-5.jpg||original-height="720" data-xwiki-image-style-alignment="center" width="680" original-width="720"]] | ||
| 12 | |||
| |
2.1 | 13 | [[https:~~/~~/www.yubico.com/why-yubico/how-the-yubikey-works/>>url:https://www.yubico.com/why-yubico/how-the-yubikey-works/||data-card-appearance="inline" shape="rect"]] |
| 14 | |||
| |
16.1 | 15 | {{panel bgColor="#DEEBFF"}} |
| |
10.1 | 16 | **YubiKey** is a hardware device that makes **two-factor authentication** as simple as possible. |
| |
2.1 | 17 | |
| |
16.1 | 18 | It doesn’t require a smartphone. But it can be used with a smartphone. |
| 19 | {{/panel}} | ||
| |
2.1 | 20 | |
| 21 | Instead of a code being texted to you, or generated by an app on your phone, you press a button on your **YubiKey **(plugged into your laptop). That's it. Each **YubiKey** has a unique code built on to it, which is used to generate codes that help confirm your identity. | ||
| 22 | |||
| 23 | When logging in to Google (or any other **YubiKey** secured application) simply insert the key into the USB port of your laptop and gently press the golden button on the **YubiKey** when prompted by the secured app. | ||
| 24 | |||
| 25 | **YubiKeys** can be used with an Android or iPhone along with a laptop. Access is granted by tapping the key on the phone as long as a **YubiKey with NFC** (near field communications) is used. Works similar to paying at a cash register by tapping your phone (Tap To Pay). | ||
| 26 | |||
| 27 | [[image:attach:image-20230329-191703.png||original-height="106" data-xwiki-image-style-alignment="center" original-width="266"]] | ||
| 28 | |||
| |
20.1 | 29 | Yubico strongly recommends having a spare key. **No spare is needed for REMC1 accounts.** . **Ignore spare key instructions.** |
| |
2.1 | 30 | |
| 31 | //**If you lose your YubiKey or it ceases to work contact Support and we’ll take care of it.**// | ||
| 32 | |||
| |
16.1 | 33 | (% style="color: rgb(7,71,166);" %)**Please note: REMC1 cannot support personal uses of your** **REMC1 YubiKey**. |
| |
2.1 | 34 | |
| |
20.1 | 35 | (% style="color: rgb(7,71,166);" %)If you want to secure personal accounts such as finances or social media, you are making a wise choice, but use your smartphone for free software 2FA options or buy your own hardware key and a backup key. |
| |
2.1 | 36 | |
| |
16.1 | 37 | {{panel bgColor="#DEEBFF"}} |
| |
2.1 | 38 | Here is a link to the hundreds of **YubiKey** supported products, services, and applications. |
| |
16.1 | 39 | {{/panel}} |
| |
2.1 | 40 | |
| 41 | [[https:~~/~~/www.yubico.com/works-with-yubikey/catalog/?sort=popular>>url:https://www.yubico.com/works-with-yubikey/catalog/?sort=popular||data-card-appearance="inline" shape="rect"]] | ||
| 42 | |||
| 43 | === {{id name="Securing-Google-Accounts-With-Hardware-2FA-using-YubiKey"/}}**Securing Google Accounts With Hardware 2FA using YubiKey** === | ||
| 44 | |||
| 45 | Traditional login is no longer secure in today’s world – malware and other attacks steal passwords and hack accounts every day. The **YubiKey** is a hardware security key that provides strong one-touch authentication, and works seamlessly with **Google Accounts**. Fortify your login by turning on **Google 2-Step Verification** and registering the **YubiKey** with your **Google Account**. | ||
| 46 | |||
| |
7.1 | 47 | ==== {{id name="Secure"/}}**Secure** ==== |
| |
2.1 | 48 | |
| 49 | By requiring the physical key to log in, you protect your account from remote and unauthorized access. | ||
| 50 | |||
| |
7.1 | 51 | ==== {{id name="Easy-to-Use"/}}**Easy to Use** ==== |
| |
2.1 | 52 | |
| |
4.1 | 53 | Get strong authentication with just a touch. Just log in to your Google Account, and tap the **YubiKey’s** gold contact when prompted. |
| |
2.1 | 54 | |
| |
10.1 | 55 | ==== {{id name="Simple-YubiKey-Setup-For-Your-Laptop"/}}**Simple YubiKey Setup For Your Laptop** ==== |
| |
3.1 | 56 | |
| |
16.1 | 57 | {{panel bgColor="#DEEBFF"}} |
| |
4.1 | 58 | Click below link to enter **Google Account Security** for your own **REMC1** **Google Account.** |
| |
16.1 | 59 | {{/panel}} |
| |
4.1 | 60 | |
| |
16.1 | 61 | [[**https:~~/~~/myaccount.google.com/security**>>url:https://myaccount.google.com/security||shape="rect"]] |
| |
3.1 | 62 | |
| |
4.1 | 63 | Scroll down to **How you sign in to Google** |
| |
3.1 | 64 | |
| |
16.1 | 65 | Click on **Security Keys** |
| |
3.1 | 66 | |
| |
18.1 | 67 | [[image:attach:how I sign into Google.png||original-height="370" data-xwiki-image-style-alignment="center" original-width="915"]] |
| 68 | |||
| |
19.1 | 69 | You will be prompted to login with your **Google** password. |
| |
7.1 | 70 | |
| |
16.1 | 71 | Click on **Add Security Key** |
| |
7.1 | 72 | |
| |
17.1 | 73 | [[image:attach:Security Keys.png||original-height="231" data-xwiki-image-style-alignment="center" original-width="805"]] |
| |
3.1 | 74 | |
| |
17.1 | 75 | Select **Physical** and click** Next** |
| |
3.1 | 76 | |
| |
17.1 | 77 | [[image:attach:add security key.png||original-height="484" data-xwiki-image-style-alignment="center" original-width="557"]] |
| |
3.1 | 78 | |
| |
16.1 | 79 | Select **OK** |
| |
4.1 | 80 | |
| |
17.1 | 81 | [[image:attach:security key setup.png||original-height="476" data-xwiki-image-style-alignment="center" original-width="544"]] |
| |
4.1 | 82 | |
| |
16.1 | 83 | Select **OK** |
| |
4.1 | 84 | |
| |
17.1 | 85 | [[image:attach:continue setup.png||original-height="485" data-xwiki-image-style-alignment="center" original-width="553"]] |
| |
4.1 | 86 | |
| |
16.1 | 87 | Insert your **YubiKey** into the USB port of your laptop |
| |
4.1 | 88 | |
| |
17.1 | 89 | [[image:attach:insrt key.png||original-height="488" data-xwiki-image-style-alignment="center" original-width="550"]] |
| |
4.1 | 90 | |
| 91 | **[ need actual Yubikey to demonstrate the finals pieces plus logging in ]** | ||
| 92 | |||
| |
2.1 | 93 | A quick (1:18) video from Yubico (ignore spare key section) |
| 94 | |||
| 95 | [[https:~~/~~/www.youtube.com/watch?v=PeF0Y8pT7UQ>>url:https://www.youtube.com/watch?v=PeF0Y8pT7UQ||data-card-appearance="inline" shape="rect"]] | ||
| |
10.1 | 96 | |
| |
14.1 | 97 | === {{id name="Securing-Bitwarden-With-Hardware-2FA-using-FIDO2-WebAuthn-with-YubiKey"/}}**Securing Bitwarden With Hardware 2FA using FIDO2 WebAuthn with YubiKey** === |
| |
10.1 | 98 | |
| |
14.1 | 99 | **FIDO2 WebAuthn Overview – Why it's our way to use YubiKey with Bitwarden** |
| |
10.1 | 100 | |
| |
14.1 | 101 | The YubiKey option is **OTP**. Choose **FIDO2 WebAuthn** option and use it with your **YubiKey.** |
| |
10.1 | 102 | |
| |
20.1 | 103 | 2FA is evolving. Using email, SMS, or even **OTP** **(one time password)** for 2FA can be phished and/or hacked via a man-in-the-middle attack. |
| |
10.1 | 104 | |
| |
20.1 | 105 | **FIDO2 WebAuthn** to the rescue. |
| 106 | |||
| |
10.1 | 107 | [[https:~~/~~/fidoalliance.org/fido2/>>url:https://fidoalliance.org/fido2/||data-card-appearance="inline" shape="rect"]] |
| 108 | |||
| |
14.1 | 109 | [[https:~~/~~/fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html>>url:https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html||data-card-appearance="inline" shape="rect"]] part of **FIDO2** |
| 110 | |||
| 111 | [[https:~~/~~/www.w3.org/TR/webauthn/>>url:https://www.w3.org/TR/webauthn/||data-card-appearance="inline" shape="rect"]] **WebAuthn** | ||
| 112 | |||
| |
10.1 | 113 | [[image:attach:image-20230330-125914.png||original-height="784" data-xwiki-image-style-alignment="center" original-width="426"]] |
| 114 | |||
| |
14.1 | 115 | ==== {{id name="Setting-Up-FIDO2-WebAuthn-with-YubiKey-for-Bitwarden"/}}**Setting Up FIDO2 WebAuthn with YubiKey for Bitwarden** ==== |
| |
12.1 | 116 | |
| |
14.1 | 117 | There are several 2FA methods that work with Bitwarden: (we use FIDO2 WebAuthn when use YubiKey) |
| |
12.1 | 118 | |
| |
14.1 | 119 | Multiple enabled methods are supported. |
| 120 | |||
| |
12.1 | 121 | [[image:attach:image-20230330-134316.png||original-height="757" data-xwiki-image-style-alignment="center" original-width="950"]] |
| 122 | |||
| |
13.1 | 123 | ==== {{id name="To-setup-and-use-FIDO2-WebAuthn-on-your-Yubikey-for-Bitwarden-use-this-link."/}}To setup and use **FIDO2 WebAuthn** on your **Yubikey** for **Bitwarden** use this link. ==== |
| |
12.1 | 124 | |
| 125 | [[https:~~/~~/bitwarden.com/help/setup-two-step-login-fido/>>url:https://bitwarden.com/help/setup-two-step-login-fido/||data-card-appearance="inline" shape="rect"]] | ||
| |
14.1 | 126 | |
| 127 | === {{id name="Securing-LastPass-With-Hardware-2FA-using-YubiKey"/}}**Securing LastPass With Hardware 2FA using YubiKey** === | ||
| 128 | |||
| |
15.1 | 129 | ==== {{id name="YubiKey-with-LastPass-Overview"/}}**YubiKey with LastPass** **Overview** ==== |
| |
14.1 | 130 | |
| 131 | [[https:~~/~~/support.lastpass.com/help/yubikey-multifactor-authentication-lp030020>>url:https://support.lastpass.com/help/yubikey-multifactor-authentication-lp030020||data-card-appearance="inline" shape="rect"]] **with LastPass** | ||
| 132 | |||
| |
15.1 | 133 | ==== {{id name="Setup-and-Configure-YubiKey-with-LastPass-(Presently-only-uses-OTP)"/}}**Setup and Configure YubiKey with LastPass (Presently only uses OTP)** ==== |
| |
14.1 | 134 | |
| 135 | [[https:~~/~~/support.lastpass.com/help/how-do-i-set-up-and-configure-yubikey>>url:https://support.lastpass.com/help/how-do-i-set-up-and-configure-yubikey||data-card-appearance="inline" shape="rect"]] | ||
| 136 | |||
| |
15.1 | 137 | ==== {{id name="Use-YubiKey-to-log-in-to-LastPass"/}}**Use YubiKey to log in to LastPass** ==== |
| |
14.1 | 138 | |
| 139 | [[https:~~/~~/support.lastpass.com/help/how-do-i-log-in-to-lastpass-and-autheticate-my-yubikey>>url:https://support.lastpass.com/help/how-do-i-log-in-to-lastpass-and-autheticate-my-yubikey||data-card-appearance="inline" shape="rect"]] |