

Check with your organization's support team or help desk to verify that security keys are allowed if you are uncertain. We do not support U2F-only security keys (like the Yubikey NEO-n).Īdditionally, your administrator must enable the use of security keys in Duo. WebAuthn/FIDO2 security keys from Yubico or Feitian are good options. Support for authentication is limited to web applications that show Duo's inline browser prompt.


Cyberattacks and identity theft are on the rise - it's never a bad time to strengthen your defences. Neither service is mandatory, but it's good to know they exist for Facebook's more privacy conscious users. It's a welcome move from the company, which is also announcing a redesigned Privacy Basics page today. They're also potentially faster - just a tap on the physical key and you should have access to your Facebook account. Physical keys are supposed to be more effective than mobile apps and SMS verification, because there's no chance of phishing or man-in-the-middle attacks. Yes, it's another object to keep on your keychain, but in return, you'll be getting a superior level of protection. When you log into your account, that means you can choose to prove your identity with a special USB stick (that supports the open Universal 2nd Factor ( U2F) standard), rather than a code sent to your phone. Following Google, Dropbox and others, Facebook has added support for these privacy-centric dongles today. You might use a password manager, or two-factor authentication via SMS, but there's another way you can stay protected - physical security keys. None of us want strangers accessing our accounts online.
