The Strongest Protection for Your Online Accounts? This Little Key
Kanebridge News
Share Button

The Strongest Protection for Your Online Accounts? This Little Key

Passwords aren’t enough to fend off hackers; these dongles are the best defense

By NICOLE NGUYEN
Mon, Mar 27, 2023 9:18amGrey Clock 4 min

Strong passwords are very important, but they’re not enough to protect you from cybercriminals.

Passwords can be leaked or guessed. The key to online security is protecting your account with a strong secondary measure, typically a single-use code. This is referred to as “two-factor authentication,” or 2FA, as the nerds know it.

I’ve written about all the different types of 2FA, such as getting those codes sent via text message or generated in an authenticator app. Having any kind of second factor is better than none at all, but physical security keys—little dongles that you plug into a USB port or tap on your phone during account logins—offer the highest level of protection.

Security keys have been around for over a decade, but now they’re in the spotlight: Apple recently introduced support for them as an optional, added protection for Apple ID accounts. Last month, Twitter removed text-message-based authentication as an option for nonpaying users, recommending instead an authenticator app or security key.

Some people are hesitant to use security keys because carrying around a physical object seems burdensome and they come with a $30-and-up added cost. Plus, what happens if they get lost?

I’ve used security keys since 2016 and think they are actually easier to manage than codes—especially with accounts that don’t require frequent logins. They’re not only convenient, but they can’t be copied or faked by hackers, so they’re safer, too.

Here’s how to weigh the benefits and common concerns of adding one or two of these to your keychain.

Which security key should I use?

Many internet services support the use of security keys, and you can use the same security key to unlock accounts on many different services. I recommend two from industry leader Yubico:

  • YubiKey 5C NFC ($US55) if you have a USB-C laptop or tablet
  • YubiKey 5 NFC ($US50) for devices with older USB ports

Other options include Google’s Titan security keys ($30 and up). In addition to working with laptops and tablets with USB ports, these keys are compatible with smartphones that have NFC wireless. Most smartphones these days have that, since it’s the technology behind wireless payments such as Apple Pay.

Adam Marrè, chief information security officer at cybersecurity firm Arctic Wolf, recommends that your chosen key is certified by the FIDO Alliance, which governs the standards of these devices.

How do security keys work?

To add a key, look in the security settings of your major accounts (Facebook, Twitter, Google, etc.). During setup, it will prompt you to insert the key into your laptop or tablet’s port or hold the key close to your phone for wireless contact.

Apple requires you to add two security keys to your Apple ID account, in case you lose one.

Typically, when you log in, you just go to the app or website where you’ve set up a key, enter your username and password as usual, then once again insert the key into the device or hold it close. (Some keys have a metal tab you have to press to activate.) At that point, the service should let you right in.

Why are they so secure?

Getting those two-factor login codes via text message is convenient, but if you are someone criminals are targeting, you could be the victim of SIM swapping. That’s where thieves convince carriers to port your number to a new phone in their possession, and they use it along with your stolen password to hack your accounts.

Even if they don’t go to all that trouble, criminals might try to trick you to hand them your codes, by calling you or spoofing a website you typically visit. At that point they can use the code for about 60 seconds to try to break in, said Ryan Noon, chief executive at security firm Material Security.

Security keys protect you in two ways: First, there’s no code to steal, and second, they use a security protocol to verify the website’s domain during login, so they won’t work on fake sites.

You can also add an authenticator app such as Authy to your most important accounts, to use only as a backup. But once you add these secure methods, you should consider removing the text-message code option.

In the rare case that someone snoops your passcode then steals your iPhone, beware: The perpetrator could still make Apple ID account changes using only the passcode, and even remove security keys from your account.

What happens if you lose your key?

The most important rule of security keys is to buy an extra one (or two).

“Think of your security key as you would a house or car key,” said Derek Hanson, Yubico’s vice president of solutions architecture. “It’s always recommended that you have a spare.”

If you lose a security key, remove it from your accounts immediately. You should have already registered your spare or an authenticator app as a backup to use in the meantime.

Where can you use a security key?

Start with your most valuable accounts: Google, Apple, Microsoft, your password manager, your social–media accounts and your government accounts.

When it comes to financial institutions, many banks don’t offer security-key protection as an option, though most leading crypto exchanges do.

What comes after security keys?

Security professionals and tech companies widely agree that passkeys are the future. They’re a new type of software option that combines the high security of a physical key with the convenience of biometrics such as your face or fingerprints. Passkeys are supported across the Android, iOS, Mac and Windows platforms, and some of your favourite sites already let you use them.

You can create a passkey on Facebook in security settings by following the app’s instructions under the security-key option. Dropbox has a similar passkey setup. Once you’re done, you’ll use your face or fingerprint as a second factor, instead of a code or key.

Eventually, physical security keys could be what we keep safe in strong boxes, as backups for our biometric-enabled passkeys. Even then, you’re probably going to want to have spares.



MOST POPULAR
11 ACRES ROAD, KELLYVILLE, NSW

This stylish family home combines a classic palette and finishes with a flexible floorplan

35 North Street Windsor

Just 55 minutes from Sydney, make this your creative getaway located in the majestic Hawkesbury region.

Related Stories
Lifestyle
‘Look Them in the Eye.’ As Maui Rebuilds, Returning Tourists Need to Be Mindful of the Trauma, Says Cultural Advisor.
By DANIELLE BERNABE 19/03/2024
Lifestyle
The hotel-style services you can enjoy — without leaving home
By Kirsten Craze 18/03/2024
Lifestyle
Bulgari’s Latest ‘Sketched’ Watches Are Drawing Attention
By LAURIE KAHLE 18/03/2024
‘Look Them in the Eye.’ As Maui Rebuilds, Returning Tourists Need to Be Mindful of the Trauma, Says Cultural Advisor.
By DANIELLE BERNABE
Tue, Mar 19, 2024 6 min

There’s an opportunity for education as tourists return to Maui while it rebuilds from last summer’s devastating wildfire, says Kalikolehua Storer, a Lahaina resident and the area cultural and training advisor for Hyatt’s Maui resorts.

Designated a National Historic Landmark in 1962, the Lahaina Historic District—once a lush Hawaiian capital and retreat for Hawaiian monarchs—is beloved by residents, explored by tourists, and has a deep-rooted heritage. Storer was working on the opposite side of the island when the blaze started last August. She scrambled to connect with family and friends. And like so many others, she grappled with the utter chaos that rapidly destroyed her hometown.

Storer’s home was spared, but the fire ultimately claimed 115 lives and destroyed or damaged more than 2,300 structures, including culturally significant sites like the Na ‘Aikane o Maui Cultural and Research Center, which housed invaluable Hawaiian artefacts (books signed by kings, genealogy, maps, and more).

Kalikolehua Storer, a Lahaina resident and the area cultural and training advisor for Hyatt’s Maui resorts
Courtesy of Hyatt

Historically, Lahaina thrived from mauka to makai (mountain to ocean), with waterways nourishing native ecosystems and communities. However, years of water redirection and climate-related drought set the stage for such a disaster, and according to Storer, the fire underscored the erosion of Hawaiian control over land and natural resources, spotlighting issues like land degradation, water misappropriation, and tourism’s stronghold on Maui.

Tourism makes up a substantial part of Maui’s GDP. The wildfire led to a 51.4% drop in visitor arrivals between August and October 2023 compared to 2022, triggering a sharp 87.1% rise in unemployment, according to government statistics.

The sector’s dominance highlights the need for a more balanced and sustainable model. Moreover, the fire’s impact on tourism underscores the urgency to diversify Hawaii’s economy for greater growth and resilience. Lahaina’s water management issues, such as the historical diversion for sugar cane cultivation, have drastically altered local ecosystems.

With only 23% of water allocated for public use and the majority consumed by the private sector (resorts, golf courses, and some agriculture, for instance), the ecological imbalance has had severe consequences for indigenous environments. Storer said she believes the aftermath of the fires and the strain on Maui’s tourism highlight the interconnectedness of ecological health and economic stability.

In response to the crisis, Maui Mayor Richard Bissen formed a five-member advisory team to lead the recovery efforts, with Storer as a key participant. Storer also sits at the table of Maui’s Office of Recovery Natural and Cultural Resources, which helps to shine light on issues impacting air, water, and land. Storer collaborates with partners from federal, state, and county levels, along with Lahaina’s cultural practitioners, to facilitate Lahaina’s recovery post-wildfire.

Storer shared visions of Maui’s rebuild with  Penta , and the balance between tourism, ecology, and the road to sustainable solutions.

Penta: With such a huge road ahead, how are you embracing hope? And what is your ideal vision for Maui?

Kalikolehua Storer: I know that I can get caught up in the end result of what will or will not work, but in the moment, our community needs to be heard, and this is my part to lean into what they are sharing. People have envisioned Lahaina as a walking town with cultural sites, a cultural marketplace, and restoring Mokuʻula, the site of the private residence of King Kamehameha III from 1837-1845. It has since been buried under a baseball field.

We also need to diversify the economy. This is a big task, but with Hawaiian leaders in all sectors, I am confident that this can be accomplished. We have nowhere else to go but up, so all ideas are worth a conversation. My ideal Lahaina is to rebuild our historical sites, churches, and learning centres, and better care for the ocean, land, and air. To be better stewards, we need to educate and make it a priority. All of us, including visitors, need to know the importance. The issues we have about water and land need to be resolved.

Explain more about the land and water and how they are pivotal parts of recovery. 

The West Maui Mountains are home to the Pu’u Kukui Watershed and Mauna Kahalawai Watershed Partnership (caretakers of the mountain area directly above the impact zone), which used to flow through waterways and land divisions ( ahupua’a ) to enrich the ecosystems. However, when the sugar cane and pineapple industry arrived, that water was diverted and went straight to those farms. The water never went back to the way it was, and because of this, the indigenous ecologies have been drained. So, water needs to be returned to streams, and a greater percentage needs to be given for public use. This is a major issue and needs to be resolved. The waterways are there, but they need to be cleaned and prepared for water to flow. That has to start upland of the watershed. Looking at an aerial map of Kauaula Valley, most of the area is dry, but along the river where the Palakiko family lives is very lush. They prepared the stream area, and it came back. However, that took years because of private-sector control.

“Asking people how they are doing, looking them in the eye, and caring about them can make a huge difference,” Storer says.
Courtesy of Hyatt

Many people believe that tourism is the biggest problem. Is that true?

Right after the fire, many people encouraged tourists to stay away. And people listened. Our economy dropped because people stopped coming. Unemployment shot up, and the economy, as a whole, suffered. Our island is so dependent on tourism, and that is part of the problem. I believe we need to diversify the economy.

How can we educate tourists, and how can hotels be better stewards?

It truly is all about education and visitors engaging in cultural experiences and even conservancy programs, so that they have a better understanding of people and place when they visit. At Andaz and the other Hyatt hotels in Maui, I’ve developed very strong, culturally driven programs to engage our guests in authentic Hawaiian activities. Things like lei making, coconut weaving, hula lessons, celestial navigation, taro demonstrations, and Natural Cultural Resources programming with the Pu’u Kukui Watershed Preserve, Kipuka Olowalu, and the Ma Ka Hana Ka ‘Ike at Mahele Farms.

At Andaz, the lūʻau experience is called the Feast at Mōkapu and focuses on the journey of the Polynesian ancestors arriving on Maui and settling in the ahupua’a where the resort sits. We don’t hold back in that storytelling. We dive into history that isn’t normally spotlighted at luau, and the uncomfortable truth of settlers to Hawaii is really important. After the fires, this education became even more important, and I encourage tourists to participate in experiences like this.

Hotels play a huge role in this and can provide cultural sensitivity sessions for their guests.

How can tourists play a role in the rebuilding?

It’s important now more than ever for visitors to consider what happened, and that their waiter, housekeeper, bartender, front desk attendant, dive instructor, store clerk, literally everyone was somehow impacted by this. Asking people how they are doing, looking them in the eye, and caring about them can make a huge difference. Also, if you choose to visit Maui, there are ways to volunteer and donate. We’re not just looking at physically rebuilding here, we’re looking at emotional wellness, history, and so much more that is going to take years. So, I would say donating to Maui Strong and taking a few hours of vacation time to volunteer can greatly help.

Allocation of funds and policies that help to financially sustain our agencies that do the work in the watersheds, waterways, farmers, and ocean agencies. The work they do today is the key to this turnaround. I believe that visitor taxes should be allocated for our Natural and Cultural Resources effort.

How can tourists be a “good tourist” and still visit in a conscientious way?

Be kind without being maha’oi (being forward in asking) and asking so many questions. A nice, genuine smile and encouraging words in passing can uplift someone. Also, those who own vacation rentals. We need help from that sector. We need to take a look at the things that got us into this crisis to begin with. Unfortunately, we are having to work through policies written years ago, not ever thinking we would be in this situation.

This interview was edited for length and clarity.

MOST POPULAR

Consumers are going to gravitate toward applications powered by the buzzy new technology, analyst Michael Wolf predicts

11 ACRES ROAD, KELLYVILLE, NSW

This stylish family home combines a classic palette and finishes with a flexible floorplan

Related Stories
Property
Heat coming out of V-shaped property market recovery
By Bronwyn Allen 05/12/2023
Money
Australian unemployment rate remains steady as labour market shows signs of a slowdown
By Bronwyn Allen 19/01/2024
Property
Japan Long Looked Down at Luxury Penthouses. Now Things Are Looking Up.
By MIHO INADA 12/01/2024
0
    Your Cart
    Your cart is emptyReturn to Shop