What's a security key?

Concerns & risks

You were trying to secure your email, and a friend recommends a physical security key.

Strong protection for important accounts.

Causes & evidence

Security keys are phishing-resistant MFA. See multi-factor authentication.

What to do

1. Check if your accounts support keys.
2. Register two keys (one spare).
3. Store the spare safely.

Common mistakes: Common mistakes: registering only one key and losing it. Register two and keep one safe at home. Check device compatibility. Keep other recovery methods updated. A security key is a small physical device that plugs into your computer or taps your phone to confirm it's you. It resists phishing because it checks the real website before responding, so a fake page can't trick it. Many email providers, password managers and social networks support them. Set them up in account security settings, and keep a backup method available too.

Speed Man tip: Great for email and admin accounts.

Wrap-up: Phishing-resistant. Register two. Keep spare.

Want the why behind it? Read Phishing in the wiki.