{"id":45836,"date":"2020-04-17T12:00:00","date_gmt":"2020-04-17T18:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=45836"},"modified":"2022-09-08T13:24:22","modified_gmt":"2022-09-08T17:24:22","slug":"hardware-mfa-benefits","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits","title":{"rendered":"Benefits of Hardware MFA Keys"},"content":{"rendered":"\n<p>As <a href=\"https:\/\/jumpcloud.com\/platform\/multi-factor-authentication-mfa\">multi-factor authentication (MFA)<\/a> becomes a more widespread industry security standard, IT admins need to find the most effective MFA method for keeping their organizations safe. When it comes to preventing account takeovers, one method stands out among the rest: hardware\/U2F keys. Let\u2019s dive into what hardware MFA keys are and how they can benefit your organization.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What are Hardware MFA Keys?<\/h2>\n\n\n\n<p>Before we talk specifically about hardware-based MFA, let\u2019s first talk about MFA in general.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What\u2019s MFA?<\/h3>\n\n\n\n<p>Multi-factor authentication is a security practice that requires authentication factors beyond the traditional set of credentials (usually username and password) used to access the majority of today\u2019s IT resources. MFA requires presentation of \u201csomething you know,\u201d which is the username and password, along with \u201csomething you have,\u201d a personal identifier, or factor, that is completely unique to the user. Secondary authentication factors can include SMS- or <a href=\"https:\/\/jumpcloud.com\/blog\/totp-mfa\">TOTP-based codes<\/a> from a smartphone, <a href=\"https:\/\/jumpcloud.com\/blog\/push-notification-mfa\">push notifications<\/a>, or even biometric data.<\/p>\n\n\n\n<p>Hardware MFA keys also fall under this category. Also known as <em>universal second factor<\/em> (U2F) or physical security keys, hardware keys can either plug into a user\u2019s system via USB or utilize a physical code generator that is unique to the user. Some examples of hardware-based MFA keys include:&nbsp;<\/p>\n\n\n\n<ul><li><a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/set-up-yubico-authenticator-mfa-for-windows-2019-08-21-10-36-47\">Yubikey<\/a><\/li><li><a href=\"https:\/\/jumpcloud.com\/blog\/what-is-google-titan\">Google Titan<\/a><\/li><li>Thetis<\/li><li>RSA SecurID<\/li><\/ul>\n\n\n\n<p>Hardware MFA keys work similarly to other MFA methods in that, after a user presents their credentials upon login, they are then directed to input their additional factor. The user inputs their generated code or touches their USB hardware key, and is then granted access to the service.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Benefits of Hardware MFA Keys<\/h2>\n\n\n\n<p>Hardware MFA keys have shown to be more effective at securing an identity than their software-based counterparts, and offer a simplified workflow for end users.<\/p>\n\n\n\n<p>In a <a href=\"https:\/\/security.googleblog.com\/2019\/05\/new-research-how-effective-is-basic.html\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">Google Security blog<\/a> study, physical security keys were found to be up to 100% effective at preventing account takeovers due to automated bots, bulk phishing, and even targeted attacks. With such purported perfect prevention rates, a set of compromised credentials has significantly less weight when leveraged against an identity backed by hardware MFA.<\/p>\n\n\n\n<p>The efficacy of hardware MFA makes a lot of sense practically. Bad actors not only need a set of compromised credentials to attack a user\u2019s identity, they also need access to a physical device that end users keep with them. This requirement makes hardware MFA very difficult to work around compared to SMS-based MFA, which can be digitally intercepted.<\/p>\n\n\n\n<p>Beyond their impressive security benefits, hardware MFA keys also offer a simple end user interface. USB-based keys embody the term \u201cplug and play\u201d \u2014 an end user slots one into their system and presses a button, fulfilling MFA requirements and gaining access to their resources in seconds.<\/p>\n\n\n\n<p>Code-based hardware keys have a similar end user experience to methods like TOTP or SMS, requiring a code to be entered in a timely fashion. Unlike other methods, however, hardware keys offer a unique tool for MFA, separating critical organization security measures from the user\u2019s personal smartphone.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Learn More<\/h2>\n\n\n\n<p>Hardware MFA keys provide tight security to your organization while making it as easy as possible for your end users to authenticate. If you\u2019d like to learn more about hardware MFA keys and MFA in general, <a href=\"https:\/\/jumpcloud.com\/resources\/navigating-the-world-of-multi-factor-authentication\">check out this webinar<\/a> or <a href=\"https:\/\/jumpcloud.com\/contact\">contact us<\/a> to learn how we can help you implement hardware MFA keys for apps and IaaS.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When it comes to preventing account takeovers, hardware MFA keys do it best. Let\u2019s dive into what they are and how they benefit your organization.<\/p>\n","protected":false},"author":70,"featured_media":45837,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[2781],"tags":[],"collection":[2775],"platform":[],"funnel_stage":[3016],"coauthors":[2515],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Benefits of Hardware MFA Keys - JumpCloud<\/title>\n<meta name=\"description\" content=\"When it comes to preventing account takeovers, hardware MFA keys do it best. Let\u2019s dive into what they are and how they benefit your organization.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Benefits of Hardware MFA Keys\" \/>\n<meta property=\"og:description\" content=\"When it comes to preventing account takeovers, hardware MFA keys do it best. Let\u2019s dive into what they are and how they benefit your organization.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2020-04-17T18:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-09-08T17:24:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/04\/benefits-hardware-mfa.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"780\" \/>\n\t<meta property=\"og:image:height\" content=\"532\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Zach DeMeyer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Zach DeMeyer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits\"},\"author\":{\"name\":\"Zach DeMeyer\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d\"},\"headline\":\"Benefits of Hardware MFA Keys\",\"datePublished\":\"2020-04-17T18:00:00+00:00\",\"dateModified\":\"2022-09-08T17:24:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits\"},\"wordCount\":572,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/04\/benefits-hardware-mfa.jpg\",\"articleSection\":[\"How-To\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits\",\"url\":\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits\",\"name\":\"Benefits of Hardware MFA Keys - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/04\/benefits-hardware-mfa.jpg\",\"datePublished\":\"2020-04-17T18:00:00+00:00\",\"dateModified\":\"2022-09-08T17:24:22+00:00\",\"description\":\"When it comes to preventing account takeovers, hardware MFA keys do it best. Let\u2019s dive into what they are and how they benefit your organization.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/04\/benefits-hardware-mfa.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/04\/benefits-hardware-mfa.jpg\",\"width\":780,\"height\":532},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Benefits of Hardware MFA Keys\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d\",\"name\":\"Zach DeMeyer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d1d6602d927eb5a16b1dfd4ba6b4c219\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g\",\"caption\":\"Zach DeMeyer\"},\"description\":\"Zach is a Product Marketing Specialist at JumpCloud with a degree in Mechanical Engineering from the Colorado School of Mines. He loves being on the cutting edge of new technology, and when he's not working, he enjoys all things outdoors, music, and soccer.\",\"sameAs\":[\"http:\/\/www.jumpcloud.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Benefits of Hardware MFA Keys - JumpCloud","description":"When it comes to preventing account takeovers, hardware MFA keys do it best. Let\u2019s dive into what they are and how they benefit your organization.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits","og_locale":"en_US","og_type":"article","og_title":"Benefits of Hardware MFA Keys","og_description":"When it comes to preventing account takeovers, hardware MFA keys do it best. Let\u2019s dive into what they are and how they benefit your organization.","og_url":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits","og_site_name":"JumpCloud","article_published_time":"2020-04-17T18:00:00+00:00","article_modified_time":"2022-09-08T17:24:22+00:00","og_image":[{"width":780,"height":532,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/04\/benefits-hardware-mfa.jpg","type":"image\/jpeg"}],"author":"Zach DeMeyer","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Zach DeMeyer","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits"},"author":{"name":"Zach DeMeyer","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d"},"headline":"Benefits of Hardware MFA Keys","datePublished":"2020-04-17T18:00:00+00:00","dateModified":"2022-09-08T17:24:22+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits"},"wordCount":572,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/04\/benefits-hardware-mfa.jpg","articleSection":["How-To"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits","url":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits","name":"Benefits of Hardware MFA Keys - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/04\/benefits-hardware-mfa.jpg","datePublished":"2020-04-17T18:00:00+00:00","dateModified":"2022-09-08T17:24:22+00:00","description":"When it comes to preventing account takeovers, hardware MFA keys do it best. Let\u2019s dive into what they are and how they benefit your organization.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/04\/benefits-hardware-mfa.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/04\/benefits-hardware-mfa.jpg","width":780,"height":532},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/hardware-mfa-benefits#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Benefits of Hardware MFA Keys"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d","name":"Zach DeMeyer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d1d6602d927eb5a16b1dfd4ba6b4c219","url":"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g","caption":"Zach DeMeyer"},"description":"Zach is a Product Marketing Specialist at JumpCloud with a degree in Mechanical Engineering from the Colorado School of Mines. He loves being on the cutting edge of new technology, and when he's not working, he enjoys all things outdoors, music, and soccer.","sameAs":["http:\/\/www.jumpcloud.com"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/45836"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/70"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=45836"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/45836\/revisions"}],"predecessor-version":[{"id":68628,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/45836\/revisions\/68628"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/45837"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=45836"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=45836"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=45836"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=45836"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=45836"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=45836"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=45836"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}