Multi-factor authentication (MFA) is a method for improving the security of your online accounts, and there are usually several ways to set it up. In NordPass, one of the MFA options is using a security key—a physical device you either insert into a port or tap to confirm your identity when signing in. Here’s why you might want to consider it and how to get started.
Contents:
Why use a security key as an MFA method?
When choosing an MFA method, many people go for an authenticator app, and it’s easy to see why. Using temporary codes is quick, simple, and works with practically any account. So why would you want to choose a different option, especially one that involves hardware? There are a few reasons:
It’s more secure. Security keys use asymmetric cryptography to authenticate your login details. When you log in, the server sends a request to your computer. The security key then signs it with the private key stored on the device and sends the response back. The server verifies the signature with the public key. If the results match, you are signed in to the desired service or website. With such a security method, the only way hackers could break into your account is by having physical access to your key.
It’s not tied to your identity, and it doesn’t leave a digital footprint. It simply helps platforms confirm that you have the right credentials. It doesn’t store any information about who you are or your passwords, nor does it keep your data on remote servers.
It’s easy to use. Security keys are becoming an increasingly common MFA option across platforms. Also, as more of those keys now include biometric sensors, you can log in with a simple tap of a finger, which beats typing in any codes.
What security keys can I use?
NordPass supports U2F security keys certified by FIDO. These include the Security Key series, YubiKey 5 series, iePass FIDO K44, MultiPass FIDO K25, ePass FIDO NFC K9 and K35, and BioPass FIDO K26 and K27, among others.
How to set up a security key for NordPass
Depending on whether you’re using NordPass on a Personal or Business plan, setting up a security key for multi-factor authentication (MFA) works a bit differently. Here’s what it looks like in each case.
Setting up a security key for your business account
Log in to NordPass vault and go to Settings.
In the Settings tab, open the Multi-factor authentication menu.
Click the Set Up button next to the Security keys option.
After you verify your identity with the verification code sent to your email, continue forward until you are asked to provide a security key in your browser.
Insert or tap your security key when prompted.
Give the key a name so you can identify it later.
Add a second key as a backup (optional but recommended).
If you do not have a backup key, download your backup codes and store them somewhere safe.
To log in with a security key:
Enter your NordPass Business password (or use your company sign-in).
Insert or tap your security key when prompted.
Enter your Master Password.
Setting up a security key for your personal account
Log in to Nord Account and go to Account Settings.
Go to the MFA section via the Account Security tab.
Enter your Nord Account password to enable MFA.
Next to the Security Key, click Set up a Key.
Tap your security key or insert it into your device.
To then sign in to NordPass with your security key:
Open the NordPass app and click Log in with Nord Account.
Enter your Nord Account email address and password.
Insert your security key when prompted.
If the key matches your information, the app will automatically recognize you and sign you in.