Why should we use 2FA? Can it really protect against hackers?

Nowadays, using just a username and password is not enough, because if data is leaked, it's not difficult for hackers to get our username and password. Therefore, we should protect our accounts from hackers.

Using Unikey is a good alternative because to verify identity with Unikey, you need to plug in the device and tap it to activate, which then allows you to authenticate and access your account.

 

What are the risks of not using 2FA?

If someone accesses your email account, they can change everything linked to that email, such as your Binance, Bitkub, or other accounts. They don't even need to attack your exchange account; just accessing your email account allows them to change everything. For example, they could request to unlock your 2FA from an exchange account or request an OTP from your email, which provides a certain level of authentication. Having a Unikey can secure exchanges, email, Facebook, and GitHub, but it cannot be used with Lastpass.

 

What is Two-Factor Authentication (2FA)?

Two-Factor Authentication, or 2FA for short, is when a user confirms their identity by providing authenticators that only the account owner knows.

 

What is Unikey, what is it for, and what are its benefits?

The purpose of Unikey is to authenticate access to various accounts. It cannot store Digital Assets. If you already have OneKey, Trezor, or Ledger, you don't need to buy an additional one. You can use a Hardware Wallet that supports the U2F function instead of Unikey. However, if you want to use them separately or for backup, you can purchase an additional one.

How do Unikey Model 1A and Model 3C NFC differ?

Unikey Model 1A uses USB-Type A

Unikey Model 1A uses USB-Type A. If your computer has a USB-Type A port, you can choose this model. It cannot be used with mobile phones.

 

Unikey Model 3C-NFC uses USB-Type C

Unikey Model 3C-NFC uses USB-Type C. If your computer or mobile phone has a USB-Type C port, you can choose this model. This model also supports NFC (Near Field Communication), allowing you to tap the Unikey to an NFC-compatible mobile phone. If you want to use it with a mobile phone, you can choose this model.

How is protection with Unikey better than other methods, and does it really protect against hackers?

 

If we want to access our account, we need to plug in the Unikey and tap it to access our account. For a hacker to get our Unikey, they would have to steal it from us, and even if they stole it, they wouldn't know the access code. Therefore, it genuinely protects against hackers, unless they physically threaten us to get the code.

Can I just use Google Prompt or Google Authenticator?

Image source: Is Google 2FA Sufficient for Protecting Proprietary Company Resources?

Google Prompt is limited to use only with Google, but we use various websites such as Binance, Bitkub, Microsoft accounts, etc. Unikey, on the other hand, can be used with a wide range of websites.

Google Authenticator can also be used, and it's better than just using a username and password. The principle of 2FA for Google Authenticator is that when we scan a QR code, we exchange what is called a Secret key. If it matches, it means we are the real owner. However, the Secret key can be leaked. We often back it up by saving an image and uploading it, which also carries the risk of being leaked online. Don't forget to turn off syncing.

How does Unikey differ from Google Authenticator?

Image source: nRF52 FIDO U2F Security Key

The way Unikey works differs from Google Authenticator. Unikey places a Public Key on the server, and the server sends a challenge back. If we are the real owner, we must be able to decrypt the data. To illustrate, it's like finding a mobile phone and wanting to know who the real owner is; you could ask them to enter a password to unlock the device. If they succeed, they are likely the real owner.

 

In summary, if you already have OneKey, Trezor, Ledger, or a Hardware Wallet, you don't need to buy an additional one. However, if you want to use them for backup, you can. Or, if you want to use it with a mobile phone, you can purchase the Unikey Model 3C-NFC.

 

If you've decided that you should use 2FA to confirm access to your account, you can order both the Unikey Model 1A and Unikey Model 3C-NFC from Bitcast.

FAQs

Q: Can Unikey be used with an iPhone?

A: Yes, if your iPhone supports NFC.

Q: How many accounts can one Unikey be used for?

A: It can be used for an unlimited number of accounts.

Q: What should I do if I lose my Unikey?

A: You can purchase two for backup. If one is lost, you can use the other to access your accounts, or use other backup methods such as SMS from your phone number or Google Authenticator.