Yubikey - Using Yubico Authenticator

This post is focused on setting up your accounts to use Yubico Authenticator on a Yubikey.  If you are looking to add your Yubikey as a hardware token / security key, check out my other post ( https://bigboystoys13.blogspot.com/2021/09/yubikey-adding-security-key-to-your.html ).  If you don't have a Yubikey yet, you might want to check out this post instead ( https://bigboystoys13.blogspot.com/2021/09/yubikeys-quick-review.html ).

The Yubico Authenticator works similar to many other Authenticator apps like Google Authenticator, Microsoft Authenticator and many others offer.  A main difference with Yubico's option is that the information is stored on your Yubikey, not on your computer or other device.  Of course remember this also means if you lose your Yubikey you lose that authentication option so always make sure you have alternate / backup options.

Before you start setting up accounts

- Make a list of the accounts you want to setup.  It helps to keep track in case you lose your Yubikey or need to change your setup later.

- If you have more than one hardware token, have them all ready.

- Give each key a unique nickname, in case you need to remove/disable it later.  If the devices have different colors or are different models that makes it easy.  If you have two of the same device, maybe use part of the serial # or use stickers to tell them apart.  The nickname can be based on where you store it (Safe, Keychain) whatever makes sense to you even a year or two later.

- Make sure you setup the Yubico Authenticator on the device you plan to use for setting up your accounts.  I would recommend you consider adding a password (on Android you can go to the 3 dots and choose "Change password" to require a password to access the codes).

TIP: If you are setting up two Yubikeys, you could do the setup of one on one device (computer for example) and the other on another device (your phone for example).  It will keep you from having to swap keys on a single device.

Steps to setup Yubico Authenticator

1) Go into your account settings and then security settings.  Here are some sample steps for various sites:

PayPal: Settings > Security > 2-step verification

Amazon: Account > Login & Security > Two-Step Verification (2SV) Settings

If you can't find the option in your settings area search the support/help area of your page or contact support for the site.

2) Find the option to add an authenticator app, normally it will show a QR code that you can scan.  Once you scan the QR code, you should get a code that changes every minute or so in your Authenticator app.  If you are using two devices at the same time you can visually compare the generated codes to make sure they are the same otherwise, once you are done setting everything up it would be good to test each Yubikey that you configured.  I did notice that sometimes I had to swipe down in the app to get the code to refresh.

3) You might want to consider disabling the SME/text message option, go check out my other post ( https://bigboystoys13.blogspot.com/2021/09/yubikey-adding-security-key-to-your.html ) near the end section 4 explains a little more about this.

Useful Yubico Links:

Yubico Authenticator - https://www.yubico.com/products/yubico-authenticator/

Yubikey - Adding security key to your account

This post is focused on adding your Yubikey as a hardware token / security key to your account.  It does not cover setting up other options.  If you are looking to setup Yubio Authenticator, check out my other post ( https://bigboystoys13.blogspot.com/2021/09/yubikey-using-yubico-authenticator.html ).  If you don't have a Yubikey yet, you might want to check out this post instead ( https://bigboystoys13.blogspot.com/2021/09/yubikeys-quick-review.html ).

Before you start setting up accounts:

- Make a list of the accounts you want to setup multi-factor authentication (MFA) on.  It helps to keep track in case you lose your Yubikey or need to add a backup.

- If you have more than one hardware token, have them all ready.

- Give each key a unique nickname, in case you need to remove/disable it later.  If the devices have different colors or are different models that makes it easy.  If you have two of the same device, maybe use part of the serial # or use stickers to tell them apart.  The nickname can be based on where you store it (Safe, Keychain) whatever makes sense to you even a year or two later.

Steps to setup the hardware tokens.  These basic steps work with many services ( Google, Microsoft, Facebook, Twitter, and Yahoo for example ).

1) Go into your account settings and then security settings.  Here are some sample steps for various sites:

- Google: From Gmail, click your icon in the top right and choose "Manage your Google Account".  In there click "Security" and go to "2-Step Verification".

- Microsoft. From www.microsoft.com, click your icon in the top right and then choose "My Microsoft Account".  Then click "Security" and "additional security options".

- Facebook: Go to the "Settings & Privacy" menu in the top right, then "Settings".  Next go to "Security and Login" and look for the "Two-Factor Authentication" section.

If you can't find the option search the support/help area of your page or contact support for the site.

2) Find the option to add a security key / add a new way to sign in and add your token.  Do this with each token you have.

3) Look at other backup options, especially if you only have one key.  Examples:

- Authenticator app: There are many options - Google and Microsoft have an option, so does Yubico itself and many other options are out there.  This is a good option, but remember if you lose your phone you lose the app with it.  If you plan to keep your key with you that is a problem (since you could lose both items at the same time), but if you plan to keep the token in a safe using the Authenticator app on your phone might be ok.  You could setup Yubico Authenticator on your Yubikey, but the whole point is that you want a backup if you lose Yubikey.  Yubico Authenticator on a token isn't a backup if it is on the same exact token.

- Backup codes: One time use codes that you can put somewhere, maybe print them and put them in a safe.  However don't put it in the same safe you have a spare Yubikey.

4) This might be a good time to disable SMS/text messages/voice calls as an option.  If you Google search "is SMS MFA secure" you will see many articles addressing issues with SMS, and since you have a hardware token as better option might as well get rid of the weaker link.  If you felt SMS was good enough, you probably wouldn't be using or researching a hardware token.

Yubikey - Quick Review

This is just going to be a (sort of) quick, high level, review of a two Yubico products and some other hopefully helpful tips.  I sort of laid things out as if someone was asking me questions.

What is a Yubikey?

For now I am going to avoid explaining terms like dual-factor authentication, or multi-factor authentication because if you are reading this post you are probably somewhat familiar and interested.  The Yubikey is a hardware token you can use for authentication.  Yubico itself has a "Why Yubico" page ( https://www.yubico.com/why-yubico/for-individuals/ ) with some good high level information about their products.  There are other products out there, I personally decided to go with Yubikey devices but do your own research.

Do I really need one?

Simply put, a hardware token can help protect your online accounts against compromise.  How bad would it be if your online accounts were taken over - not just that someone logged into your account, but they took control of it or erased everything?  Don't forget your e-mail account is often used to gain access to other accounts, so one compromised e-mail account could lead to an even larger impact.  Don't focus on the cost of the device, focus on the impacts you are avoiding.

Which one should I get?

With Yubico, I mainly looked at two options - Security Key NFC and Yubikey 5 series.  This my quick summary of the two options:

1) The Security Key NFC just has one option, that includes NFC and USB-A.  It supports common protocols like U2F and FIDO2, and works with many common providers like Google, Microsoft and Facebook.  Chances are you use at least one of those services.  The device is water and crush resistant, and does not require batteries.

2) The Yubikey 5 Series adds many other options above what the Security Key NFC provides.  Here are a few examples:

• In addition to FIDO2 and U2F, these also support additional protocols like Smart card, OTP and OpenPGP 3
• Multiple interface options ( USB-A, USB-C, NFC and Lightning ) and device styles
• IP68 rated: dust tight and water submersible

Yubico has a quiz ( https://www.yubico.com/quiz/ ) that walks you through the process of picking the best option, and you can also check the catalog of sites that work with YubiKey ( https://www.yubico.com/works-with-yubikey/catalog/ ) to see if your service is supported.  I am not sure the quiz would actually even suggest the Security Key NFC - even when I picked simple options it didn't come up.  This page ( https://www.yubico.com/store/compare/ ) has a good comparison of the various products.

Do I really need a spare?

The quiz does ask if you want to get a spare device.  Imagine if you had a safe with 1 set of keys.  If you lost the key there would be no way to get into the safe.  A second hardware token isn't exactly a crazy idea, but in many cases you can also use other methods as a second authentication option so it isn't required.  No matter what, make sure your plans account for the fact your hardware token could be lost or damaged.  Some accounts let you print "one time use" codes, or provide other authentication options you can consider.

If cost is a factor, the Security Key NFC by Yubico is going to get you into this at a cheaper cost ( around $25 ).  However the Yubikey 5 series has more connector options and supported protocols, and is probably the better option for a tech savvy user that might want to try out some of the additional features.

What did you get and why?

Personally I ended up getting the Security Key NFC as my first device to get my hands on a hardware token, at some point you have to stop reading about it and just go for it.  For the simple use case of tying my accounts to a hardware token, the Security Key NFC did the job but the geek in me wanted to try out the 5 Series since it has extra features.

Yubico Authenticator is one of the features that works on the 5 series but doesn't work on the Security Key NFC.  I tested it out with a few accounts, just to see how it works.  If you already use apps like Microsoft or Google's Authenticator app on Android, then the Yubico app will be very familiar.  I did notice that the Android app does not seem to work on a Chromebook via USB-C, at least when I tested it.  The big difference between Yubico's app and other apps I have seen is that the information is stored on your Yubico token making it easy to move between devices, but I believe there is a limit on the number of accounts.  This page ( https://support.yubico.com/hc/en-us/articles/4404456942738-FAQ#what-is-the-yubikey-s-account-limit- ) you can find information about various limits.

As I mentioned earlier, the Yubikey 5 series has multiple connectors and form factors.  I went with Yubikey 5C with USB-C for future proofing since more devices use USB-C, but I also purchased USB-C to USB-A adapter from Syntech which so far has worked fine on a Windows laptop that only has USB-A ports.  For now I plan to keep my Security Key NFC as the "backup" device, and the Yubikey 5C as one I use to test out some of the new features.

I got one, now what?

If you decide to get a Yubikey, check out these other posts of mine that might help with some tips on setting it up:

Yubikey - Adding security key to your account

https://bigboystoys13.blogspot.com/2021/09/yubikey-adding-security-key-to-your.html

Yubikey - Using Yubico Authenticator 

https://bigboystoys13.blogspot.com/2021/09/yubikey-using-yubico-authenticator.html

Useful Yubico Links:

Authentication Standards - https://www.yubico.com/authentication-standards/

Security Key NFC - https://www.yubico.com/products/security-key/

Yubikey 5 Series - https://www.yubico.com/products/yubikey-5-overview/

Device comparison - https://www.yubico.com/store/compare/

Quiz to see which device is best for you - https://www.yubico.com/quiz/

Catalog of services that work with Yubikey - https://www.yubico.com/works-with-yubikey/catalog/?sort=popular

Yubico Authenticator - https://www.yubico.com/products/yubico-authenticator/

MakerHawk (Keweisi) USB-C meter Review

I recently purchased a MakerHawk USB-C test meter ( back of the device says Keweisi model KWS-1802C ) for a product review. The device comes alone, no cables or anything which is fine.

I don’t know if the average user would have a need for such a device, but since I like to play around with technology and post on my blog I figured it would be a nice addition to my toolkit.  I already have a USB-A to USB-C cable with a built-in V/A display, and a USB-A to microUSB cable with built-in V/A display but I didn’t have anything for USB-C to USB-C.

The charger shows voltage, amps, time charging, watts, mAh and temperature.

To test the charger out, I tried various things:

- Tested a Choetech and Inateck USB-C PD charger against various devices ( two Chromebooks and a Samsung S9+ ).  I saw a range of voltages from 5V on the S9+ all the way to 15V from my Lenovo Chromebook C330.

- I tested a RAVPower powerbank with my Lenovo Duet.  It was interesting because I was able to have the Duet charge the powerbank, and also have the powerbank charge the Duet.  In both cases, the meter property showed the direction of flow.

- The highest voltage was when I was charging the RAVPower powerbank, it was almost 20V (about 30W) which seems to be the max charging input.

Here are some product pictures:

Some of my equipment

The MakerHawk shows the USB-C measures,
and the Choetech shows the voltage on the USB-A.

Chromebook Duet is charging the battery pack
(arrow shows current flowing out)

Battery pack is charging the Chromebook Duet
(arrow shows current flowing in)

Here are the main points I noticed about this product:

Easy to use: Just plug it in and use it, nothing special

Reversible: It measures flow in both directions, so you can plug the meter into your charger or the device being charged.

Budget friendly: Very inexpensive little gadget to help you with any testing you need to do.

Bottom line: Neat addition to the toolkit of anyone that is into technology.

Choetech USB Type-C to HDMI Cable Review (Model XCH-1201BK)

Disclosure of Material Connection: I received this product for free in a giveaway. I was not required to write a review, but I chose to do so since the product aligns with my blog. I am disclosing this in accordance with the Federal Trade Commission's requirements.

I recently received a Choetech USB Type-C to HDMI Cable Review (model XCH-1201BK) in an online giveaway.  The company Choetech has many different adapters, so make sure you look at the various options to determine which works for your intended use.

Carrying case

Cable and open carrying case

The cable itself came in a nifty little round case that has enough space to hold another small cable or maybe a memory card making it a useful carrying case.  The cable itself has a USB-C plug on one side, and a HDMI connector on the other side.  You can read all the details on the company or Amazon page ( links at the end of this post ) but here are some key points:

- Supports 4K @ 60Hz resolution
- Support DP Alt Mode ( NOT MHL or Slimport, make sure your device is compatible )
- Does not charge your device while playing video, but Choetech does have other adapters with that option

To test the cable, I connected it to my HDMI TV and my Samsung S9 Plus.  The video immediately came up on the TV, then I proceeded to test multiple video applications:

- Google Play Movies
- Netflix
- YouTube
- Crackle
- Movies Anywhere
- Hulu
- Tubi TV
- PUGB Mobile

All the applications displayed on the TV with no problem.  I didn't get any error messages or warnings from the movie apps.  I don't remember the exact adapter, but I know that in the past I would run into issues using HDMI adapters ( MHL or Slimport I can't remember which ) because certain applications would not output video.  I think this was some sort of security related feature, so I was happy to see that this Choetech adapter worked just fine.

I plan to continue testing the adapter, including watching a full movie or multiple TV episodes to see if I run into any issues and will update my review as necessary.

Here are the main points I noticed about the adapter:

Built-in HDMI connector: You don't have to carry around a bunch of extra cables, just this one adapter that can plug into the HDMI input that most TVs / projectors have.  I do have a HDMI to VGA adapter (for a computer monitor) that had a male HDMI connector so I couldn't plug it into this cable, so depending on your scenario you may want to consider other Choetech options.

Angled connector: If you are going to use this with a smartphone, the connector will help keep the cable out of the way if you are holding the phone.  It should also help keep the plug tidy coming out of a laptop since you can run it along the side of the laptop instead of just sticking out.

Easy to use: On the Samsung S9 Plus there was no special software or configuration required, it worked as soon as I plugged it in.

Bottom line: Great USB-C to HDMI option to consider, and if this isn't exactly the right one for you Choetech has other options.

Choetech Product Page: https://www.choetech.com/product/usb-c-to-hdmi-nylon-braided-cable-4k-60hz.html
Amazon Product Page: http://a.co/4yy2Nbg

Jelly Comb USB Power Muli-meter Review

Disclosure of Material Connection: I received this product for free so that I could provide product feedback to the company and post a product review. I was not required to write a positive review and I do not rate products higher than they should have been. I am disclosing this in accordance with the Federal Trade Commission's requirements.

I recently received a Jelly Comb USB power multi-meter for a product review. I was looking forward to testing this product to see if it would be a good addition to my geek toolkit.  For testing things like USB battery packs, I have a USB tester which would let me see the voltage and current but I didn't have a method to test the capacity easily.

Jelly Comb tester

The Jelly Comb tester is able to measure voltage, current and capacity.  It can store 10 sets of data, and even saves the data if the power is turned off.  I considered this a very important feature primarily for testing USB battery packs because you wouldn't want to lose your test data when the pack itself finally dies if you are doing a capacity test.

Easy to read display

For my first test, I used a 5 port 8A USB charger as a power source and tested 3 different USB meters to see the voltage:

Jelly Comb : 5.15V
DROK unit 1:  5.11V
DROK unit 2: 5.17V

As you can see there is variance between the 3 but I would consider it minimal for my use.  I also tested all 3 devices with a 1A load and they all measured about the same current.

For my next test, I wanted to test the ability to measure capacity.  I used a fully charged USB battery pack, the Jelly Comb tester and a 1A load.  Once the battery pack died, I connected the Jelly Comb (without load) to another USB source and looked at the measured capacity.  Here are the numbers I came up with on that test:

- Rated capacity per product info: 6000 mAh
- Measured capacity: 3870 mAh

So the measured capacity was about 65% of the rated capacity.  I plan to test a few other battery packs to get an idea of what sort of loss I see on average.

Testing the capacity of one of my battery packs

For the average user, I would see this as a great tool to make sure your devices are charging at the voltage and current expected.  You could also use it to help measure the actual capacity of your battery packs, and compare it over time.

Here are the main points I noticed about this product:

Ease of Use: You just plug the device up between whatever you want to measure.  The fact it only has 1 button isn't too complicated as long as you read the directions.

Features: I have other similar devices that only measure voltage and current, this one also measure mAh capacity.

Size: The device itself is small, about the size of a stick of gum.

Bottom line: If you are looking to do some at home USB testing, this is a great option to consider.  I definitely plan to use this for future tests

Amazon Product Page: http://amzn.com/B00NHHP06C