SIGN IN WITH A USB SECURITY KEY
We’ve mentioned USB security keys throughout this feature, so you may be wondering which one you should buy. We recommend using a key and another passkey method, so you will still be able to access your accounts if you lose your device.
As long as the key is FIDO-certified, it will work with all websites and apps that support passkeys, as well as those that only support security keys (such as Facebook), but there are significant differences between the devices. Here’s our pick of the bunch.
BEST ALL-ROUND KEY YubiKey 5 NFC
$50 fromyubico. com
Made by Yubico, the co-developer of the FIDO authentication standard, the tiny YubiKey 5 NFC (below) fits comfortably on your
keyring, so you can access your accounts securely wherever you go.
Simply plug it into the USB-A port on a
PC or tap it on an NFCenabled phone or tablet to sign in. It’s compatible with services including Google, Microsoft, Facebook, Dropbox, 1Password, and many more, and is waterproof and crush-resistant. A USB-C version—the YubiKey 5C NFC— is available for $55, and Yubico has lots of other keys in its range (see yubico. com/products).
BEST BUDGET KEY Thetis Fido U2F Security Key
$29 fromthetis. io
This impressively cheap security key (right) has a compact folding design with a rotating aluminum casing that protects its connector against drops, bumps, and scratches. It supports FIDO’s U2F (Universal
2nd Factor) standard rather than the older UAF (Universal Authentication Framework) and OTP (One Time Passcode) protocols, but still works with a wide variety of services. This model is Bluetooth-enabled, but others in the range aren’t, so ensure you buy the right one if you want to sign into accounts wirelessly.
BEST BIOMETRIC KEY Kensington VeriMark
$75 fromstore. kensington.com
Although it lacks NFC, which means you need to connect it to a phone or tablet with a USB cable, the Kensington VeriMark Guard (below) has the advantage over other security keys of a built-in fingerprint reader. This gives you two ways to sign into accounts on your PC, and ensures that nobody but you can access your data.
Its tiny design (7x18x21mm) means the key is best left plugged into your computer, though it does come with a protective cover and tether.
BEST PASSWORD MANAGER CryptoTrust OnlyKey
$99 fromonlykey. io
The OnlyKey (left)combines a security key with a password manager, complete with a built-in keypad for typing logins without them being stolen by keyloggers.
It supports several methods of authentication, including U2F and OTP, and is itself protected with a PIN so nobody can access your accounts if it’s lost or stolen.
Extra features include encrypted backup and self-destruct (which wipes the device after 10 failed attempts to unlock it). However, its user interface is rather confusing.