Support for Hardware Security Keys

2FATo make multi-factor authentication (MFA) a little easier for users, 4me now supports the use of hardware security keys, such as the ones provided by Yubico, Thetis and FEITIAN.  A hardware security key does not rely on the user receiving a code in a text message or email so this code can be used to confirm the user’s identity.  Instead, a physical key that the user owns is used as the second factor in the authentication process.  Not having to wait for a code and not having to entering this code makes the whole authentication process much more convenient.

In the 4me Specialist Interface, users can add a security key by clicking on their picture or initials in the upper right of the browser window and selecting the ‘My Profile’ option.  They can then open the ‘Access & Security’ section.  That is where, if multi-factor authentication has not yet been activated, they can click on the option ‘Set up 2FA in 4me’.

Access & Security section in Settings console

Apart from the option to set up two-factor authentication with an authentication app (like Authy or Google Authenticator), users now see the option to add a security key.

2-factor authentication set up in 4me

When the option to add a security key is selected, users can give their security key a name.

Register a security key in 4me

After pressing the Register button, 4me will guide them through the last steps.

Guiding the security key registration

Users then have the ability to download or copy a set of recovery codes before 2FA is actually activated.

After a security key has been registered, additional keys can be added, for the 4me App on the user’s smartphone.

Registered security keys in 4me

The built-in TouchID sensor on MacBooks can also be added as a security key.  It is even possible to use both security keys and an authentication app.

All in all, 4me’s support for hardware security keys gives users a lot more flexibility when they are making use of two-factor authentication to protect their 4me access.