And this is all ignoring their susceptibility to things like phishing attacks, keyloggers, and all sorts of other vulnerabilities.

And if you do use a password manager, how often do you change them? Google says 60% of Americans only swap passwords when they have to. On top of that, you have to come up with a password - according to a recent survey by Google of 4,000 Americans, 19% say they've used a 'common' easily-guessed password like 123456 or 'Password.' Even when the stakes are high, people can be pretty stupid without realizing the true risk. If you don't use a password, odds are you've succumbed to at least some password re-use between services, and that means a security vulnerability at one venue can easily spread to compromise multiple accounts. If you are running this from a non-Administrator account you will be prompted for local administrator credentials. In the Windows Start menu, select Yubico > Login Configuration.

Plus, passwords are pretty dumb when you think about them. It works with Google Chrome or any FIDO-compliant application on Windows, Mac OS or Linux and with applications that provide FIDO, FIDO2, or one-time-password (. The provisioning process has defaults and you only need to specify which accounts you want to enable for use with YubiKeys. I know this sounds a little weird to think about, and not using a password seems like it would introduce other issues, but it's still secure in a fundamental way.

Google chrome yubikey