Credit cards may soon look a bit different in the UK
October 16, 2018
Major credit card counterfeit ring busted by alert employee
October 30, 2018
A big part of PCI compliance is using strong passwords. The longer and more sophisticated the password the harder it is for it to be cracked or stolen. In some cases this is the only line of defense between a nefarious actor and your security and it should be taken seriously. Passwords may soon be a thing of the past and Google is leading the way.
Google is one of the most valuable companies in the world but then you know that. You very rarely hear about them being involved in a data breach or anything like that. There is a reason for that. In 2017 Google began requiring its 85,000+ employees to use a physical Security Key rather than a password.
The Security Key is a USB-based device developed by Yubico. It replaces both passwords and other 2-Factor Authentication procedures instead creating Universal 2nd Factor (U2F) authentication by inserting the device and pressing the button on it. A password is no longer required unless the users tries to access the system from a different device (after inserting the Security Key first!).
The keys cost $20 each and require a USB-A or C port on a computer. A key for mobile devices that lack a USB port are also available. The keys are about the size of a thumb drive and can be placed onto a keyring for safe keeping. Solutions for individuals as well as companies of all sizes can be purchased so it is available for just about anyone. It is fast and easy to use as well.
U2F is becoming more and more popular with companies. It works with popular websites like Facebook, Dropbox, and Github along with of course Google along with all of its services. It can also work with several different password manager programs as well. It is also supported on most major web browsers like Chrome, Firefox and Opera and Microsoft will update Edge later this year. Apple has not said whether it will be incorporated into Safari.
Since the Security Key was implemented at Google they have not had any breaches nor have any employees been successfully phished. Considering Google has a huge web presence with huge amounts of sensitive information that is quite impressive, especially when data breaches have seemingly become the norm. Could something like this be right for your business? Give JLE Business Consultants a call and we can go over all of your options with you to help you determine if it is. Security starts with you and this appears to be an impressive new piece of technology.
