YubiKey for cryptocurrency (2024)

Grow your custody and retail customer base by offering the best security and user experience

Legacy MFA such as SMS, one time passwords and mobile authenticators are cumbersome to use and easily breached via phishing attacks, SIM swapping, and man-in-the-middle phishing attacks. Your retail and custody customers need strong authentication using a modern MFA approach that is phishing resistant and can protect their cryptocurrency accounts against account takeovers.

Increase brand reputation, attract new customers, and ensure customer retention by offering the highest level of security, and the best user experience. Offering the YubiKey for strong authentication to exchange accounts ensures that cryptocurrency stays protected at the exchange level while account secrets stay safe on the key. Authentication with the YubiKey to exchange accounts is simple—users simply tap/touch their security key. Yubico also offers Yubico Authenticator, a mobile authenticator where secrets are stored securely on the YubiKey versus the mobile device.

Secure cryptocurrency and blockchain assets with crypto-backed hardware security

Protect your customer PII data against account takeovers

Whether your applications and data such as customer Personally Identifiable Information (PII) reside on-premises or in the cloud, you need to ensure they are protected against unauthorized access.

YubiKeys offer high-assurance MFA for employees, contractors and privileged users, so only authorized users have access to PII data and critical systems. YubiKeys integrate seamlessly with existing IAM solutions such as Microsoft, Okta, Duo and Ping, and provide secure authentication for hundreds of applications and services.

“At Coinbase, every customer is opted into two-factor authentication (2FA) automatically with hardware security key support such as the YubiKey. We believe this extra step helps us keep our customers and their funds secure, including by providing protection against account takeovers (ATOs), which are usually caused by phishing campaigns, SIM swaps, or support scams.”

“SMS Based 2FA Is Not Enough: Regardless of the assets and/or identities you are trying to protect online, upgrade to hardware based security (i.e.: something physical that an attacker would have to physically obtain in order to perform an attack). While Google Authenticator and Authy can turn your mobile device into a piece of hardware based security, I would advise going a step further. Pick up a YubiKey that you physically control and cannot be spoofed.”