SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
Story image
Apple Supports YubiKey Security Keys for Enhanced iCloud Account Protection
Mon, 30th Jan 2023
FYI, this story is more than a year old

Apple has taken a major step in the world of cybersecurity by incorporating Yubico’s YubiKey to provide stronger protection against phishing for iCloud accounts. The move is part of Apple’s iOS 16.3 update, which now offers security key support for Apple ID accounts. With over 95% of active iCloud accounts already using two-factor authentication, the introduction of physical security keys such as the YubiKey is expected to make a significant impact on modernizing the approach to cybersecurity.

Physical security keys like the YubiKey are considered the most secure form of multi-factor authentication. This is in contrast to the traditional methods of multi-factor authentication such as SMS-based authentication and one-time passcodes, which have proven to be insufficient in protecting users from phishing attacks. These traditional methods are being targeted by attackers in increasing numbers and are becoming more vulnerable to data breaches.

The YubiKey puts users in control by ensuring that only those with access to the physical key can access the account. This is a crucial factor in protecting users against phishing attacks, as 90% of all breaches are tied to stolen credentials. The YubiKey provides a trusted and gold-standard form of authentication that is far more secure than traditional methods.

Apple’s move to embrace hardware security keys is a major milestone in the world of cybersecurity. Physical security keys are becoming increasingly popular due to the increasing number of phishing attacks, and the importance of securing user credentials. The availability of security key support on Apple devices is expected to drive further adoption of hardware security keys, as more and more people become aware of the benefits.

In a statement, Derek Hanson, VP of Standards and Alliances at Yubico, praised Apple for its significance release. He said, “It is important for companies like Apple to embrace hardware security keys. 90% of breaches can be tied to stolen credentials, and she reinforced how YubiKeys put the user in control to protect themselves against phishing attacks with the trusted, gold-standard of authentication. We applaud Apple on the significance of this release.”

Yubico has already started testing the implementation process during Apple’s beta rollout in December and is excited to test further use cases now that the update has been released. The company has promised a future blog post on how to get your Apple ID protected with your YubiKey.

In conclusion, Apple’s move to incorporate the YubiKey is a major step in the world of cybersecurity. With over 95% of active iCloud accounts already using two-factor authentication, the introduction of physical security keys is expected to make a significant impact in modernizing everyone’s approach to cybersecurity. The YubiKey provides a trusted and secure form of authentication that is far more advanced than traditional methods, making it an ideal solution for protecting against phishing attacks.