Hardware Security Keys (YubiKey & FIDO2 WebAuthn)

The Gold Standard of Authentication

Hardware security keys like the YubiKey or Google Titan Key represent the strongest protection against account takeovers.

How a Security Key Works

A security key is a small USB/NFC device that implements the FIDO2 / WebAuthn open standard.

[Browser / Site] <--- Cryptographic Challenge ---> [YubiKey]
   (e.g., google.com)                                (User Touches Key)

1. When logging in, the site sends a cryptographic challenge to your browser.
2. You insert or tap your YubiKey and physically press the gold contact point.
3. The key signs the challenge using a private key stored hardware-isolated inside its chip.

Why Security Keys Stop Phishing Cold

Even if you fall for a fake phishing site that looks 100% identical to Google or Microsoft:

• The WebAuthn protocol cryptographically binds the request to the domain in the address bar.
• The key will refuse to respond to fake-google.com!