PROOP2FA/MFA
YubiKey security keys. A password alone is not enough.
A YubiKey is a small hardware key that your employee plugs into the computer. We set it up for Google Workspace email and accounts, and as an option in Duo Security for Windows sign-in.
Scope
One key for email and Duo
The same key can serve an employee for several accounts at once. We roll out keys as part of 2FA/MFA, also without the IT Transformation.
What we set up keys for
Google Workspace email
The key confirms sign-in to your company’s Google Workspace email and account.
Confirmation in Duo – option
Instead of approving the sign-in on the phone, your employee can use a key that types a one-time code. We add it in Duo as an option.
Duo Security
Fake sign-in pages
A password phished by a fake email is not enough
The key checks the address of the page where your employee signs in. On a fake page, even one that looks just like the Google sign-in, the key will not confirm the sign-in, so the password typed there will not open the account.
Does the key work without a phone?
Yes. The key confirms sign-in on its own, without a phone and without a battery. It can be added in Duo as an option: there, the key types a one-time code.
What if an employee loses the key?
More than one key can be assigned to a Google Workspace account. The spare one then opens the account, and the lost one is removed from the list of keys.
Who buys the YubiKeys?
You buy the keys yourself, and we set them up, also without the IT Transformation. We agree on the scope and quote after the audit.
2FA/MFA
A second confirmation: phone or key
- 2FA/MFAemail, Windows, RDP
- Duo Securityconfirmation on your phone
- YubiKey security keysconfirmation with a key, no phonethis page
Contact
Let’s talk about keys for your team
You tell us which email and which accounts your team uses. We agree on the scope and quote for the key rollout after the audit.
