text: <!DOCTYPE html>
  <html itemscope lang="en-us">
  <head><meta http-equiv="X-UA-Compatible" content="IE=edge" />
  <meta charset="utf-8">
  <meta name="HandheldFriendly" content="True">
  <meta name="MobileOptimized" content="320">
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><meta name="generator" content="Hugo 0.57.2" />
  <meta property="og:title" content="How FIDO U2F Security Keys Work" />
  <meta name="twitter:title" content="How FIDO U2F Security Keys Work"/>
  <meta itemprop="name" content="How FIDO U2F Security Keys Work"><meta property="og:description" content="Effective user authentication is a critical part of securing your data and infrastructure. Passwords are not enough any more, multi-factor auth is a must. This talk will dive into how FIDO U2F security keys work, why they are awesome, and how they defend against phishing attacks.
  SMS codes and one-time-password apps are a great improvement over passwords alone, but the FIDO Alliance’s Universal Two Factor specification attempts to take it a step further." />
    <meta name="twitter:description" content="Effective user authentication is a critical part of securing your data and infrastructure. Passwords are not enough any more, multi-factor auth is a must. This talk will dive into how FIDO U2F security keys work, why they are awesome, and how they defend against phishing attacks.
  SMS codes and one-time-password apps are a great improvement over passwords alone, but the FIDO Alliance’s Universal Two Factor specification attempts to take it a step further." />
    <meta itemprop="description" content="Effective user authentication is a critical part of securing your data and infrastructure. Passwords are not enough any more, multi-factor auth is a must. This talk will dive into how FIDO U2F security keys work, why they are awesome, and how they defend against phishing attacks.
  SMS codes and one-time-password apps are a great improvement over passwords alone, but the FIDO Alliance’s Universal Two Factor specification attempts to take it a step further."><meta name="twitter:site" content="@devopsdays">
  <meta property="og:type" content="talk" />
  <meta property="og:url" content="/events/2018-seattle/program/jen-tong/" /><meta name="twitter:creator" content="@DevOpsDaysSEA" /><meta name="twitter:label1" value="Event" />
    <meta name="twitter:data1" value="devopsdays Seattle 2018" /><meta name="twitter:label2" value="Dates" />
      <meta name="twitter:data2" value="April 24 - 25, 2018" /><meta property="og:image" content="https://www.devopsdays.org/img/sharing.jpg" />
  <meta name="twitter:card" content="summary_large_image" />
  <meta name="twitter:image" content="https://www.devopsdays.org/img/sharing.jpg" />
  <meta itemprop="image" content="https://www.devopsdays.org/img/sharing.jpg" />
  <meta property="fb:app_id" content="1904065206497317" /><meta itemprop="wordCount" content="147">
  <title>How FIDO U2F Security Keys Work - devopsdays Seattle 2018
  </title>
  <script>
  window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)};ga.l=+new Date;
  ga('create', 'UA-9713393-1', 'auto');
  ga('send', 'pageview');
  
  
  </script>
  <script async src='https://www.google-analytics.com/analytics.js'></script>
  
  
  <link href="/css/site.css" rel="stylesheet">
  <link href="https://fonts.googleapis.com/css?family=Roboto+Condensed:300,400,700" rel="stylesheet"><link rel="apple-touch-icon" sizes="57x57" href="/apple-icon-57x57.png">
  <link rel="apple-touch-icon" sizes="60x60" href="/apple-icon-60x60.png">
  <link rel="apple-touch-icon" sizes="72x72" href="/apple-icon-72x72.png">
  <link rel="apple-touch-icon" sizes="76x76" href="/apple-icon-76x76.png">
  <link rel="apple-touch-icon" sizes="114x114" href="/apple-icon-114x114.png">
  <link rel="apple-touch-icon" sizes="120x120" href="/apple-icon-120x120.png">
  <link rel="apple-touch-icon" sizes="144x144" href="/apple-icon-144x144.png">
  <link rel="apple-touch-icon" sizes="152x152" href="/apple-icon-152x152.png">
  <link rel="apple-touch-icon" sizes="180x180" href="/apple-icon-180x180.png">
  <link rel="icon" type="image/png" sizes="192x192"  href="/android-icon-192x192.png">
  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
  <link rel="icon" type="image/png" sizes="96x96" href="/favicon-96x96.png">
  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
  <link rel="manifest" href="/manifest.json">
  <meta name="msapplication-TileColor" content="#ffffff">
  <meta name="msapplication-TileImage" content="/ms-icon-144x144.png">
  <meta name="theme-color" content="#ffffff">
  
  
    
      
        <link href="/events/index.xml" rel="alternate" type="application/rss+xml" title="DevOpsDays" />
        <link href="/events/index.xml" rel="feed" type="application/rss+xml" title="DevOpsDays" />
      
    
  
  
  <script src=/js/devopsdays-min.js></script></head>
  <body lang="">
  <nav class="navbar navbar-expand-md navbar-light">
  
    <a class="navbar-brand" href="/">
    <img src="/img/devopsdays-brain.png" height="30" class="d-inline-block align-top" alt="devopsdays Logo">
    DevOpsDays
  </a>
  <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent" aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="Toggle navigation">
    <span class="navbar-toggler-icon"></span>
  </button>
    <div class="collapse navbar-collapse" id="navbarSupportedContent">
      <ul class="navbar-nav mr-auto"><li class="nav-item global-navigation"><a class = "nav-link" href="/events">events</a></li><li class="nav-item global-navigation"><a class = "nav-link" href="/blog">blog</a></li><li class="nav-item global-navigation"><a class = "nav-link" href="/sponsor">sponsor</a></li><li class="nav-item global-navigation"><a class = "nav-link" href="/speaking">speaking</a></li><li class="nav-item global-navigation"><a class = "nav-link" href="/organizing">organizing</a></li><li class="nav-item global-navigation"><a class = "nav-link" href="/about">about</a></li></ul>
    </div>
  </nav>
  <nav class="navbar event-navigation navbar-expand-md navbar-light">
    <a href="/events/2018-seattle" class="nav-link">Seattle</a>
    <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbar2">
      <span class="navbar-toggler-icon"></span>
  </button>
    <div class="navbar-collapse collapse" id="navbar2">
        <ul class="navbar-nav"><li class="nav-item active">
                    <a class="nav-link" href="/events/2018-seattle/location">location</a>
                  </li><li class="nav-item active">
                    <a class="nav-link" href="/events/2018-seattle/registration">registration</a>
                  </li><li class="nav-item active">
                    <a class="nav-link" href="/events/2018-seattle/program">program</a>
                  </li><li class="nav-item active">
                    <a class="nav-link" href="/events/2018-seattle/speakers">speakers</a>
                  </li><li class="nav-item active">
                    <a class="nav-link" href="/events/2018-seattle/sponsor">sponsor</a>
                  </li><li class="nav-item active">
                    <a class="nav-link" href="/events/2018-seattle/contact">contact</a>
                  </li><li class="nav-item active">
                    <a class="nav-link" href="/events/2018-seattle/conduct">conduct</a>
                  </li></ul>
    </div>
  </nav>
  
    <div class="container-fluid">
          <div class="row">
                <div class="col-md-12"><div class = "row">
      <div class = "col-md-5 offset-md-1">
      <h2 class="talk-page">How FIDO U2F Security Keys Work</h2><br /><br /><br />
  
        <span class="talk-page content-text">
          <iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/DWrLBwi7ZBA" frameborder="0" allowfullscreen></iframe>
  
  <p>Effective user authentication is a critical part of securing your data and infrastructure. Passwords are not enough any more, multi-factor auth is a must. This talk will dive into how FIDO U2F security keys work, why they are awesome, and how they defend against phishing attacks.</p>
  
  <p>SMS codes and one-time-password apps are a great improvement over passwords alone, but the FIDO Alliance’s Universal Two Factor specification attempts to take it a step further. U2F provides a phishing resistant, hardware based second authentication factor.</p>
  
  <p>Before you depend on a technology as a building block of security, it’s good to understand how it works, and why it’s a good fit for your needs. This talk will cover these things, so you don’t have to read the spec yourself.</p>
  
  <p>An overview of the two-factor landscape</p>
  
  <ul>
  <li>Why U2F is awesome</li>
  <li>How it resists phishing attacks</li>
  <li>How those security keys work inside</li>
  </ul>
  
        </span></div>
    <div class = "col-md-3 offset-md-1"><h2 class="talk-page">Speaker</h2><img src = "/events/2018-seattle/speakers/jen-tong.jpg" class="img-fluid"  alt="jen-tong"/><br /><br /><h4 class="talk-page"><a href = "/events/2018-seattle/speakers/jen-tong">
              Jen Tong
            </a></h4><a href = "https://twitter.com/MimmingCodes"><i class="fa fa-twitter fa-2x" aria-hidden="true"></i>&nbsp;</a><br />
            <span class="talk-page content-text"><p>Jen is a Security Advocate on Google Cloud Platform. In this role she helps developers and IT professionals stay out of trouble while getting the most out of cloud computing. Previously she worked in </p><a href = "https://www.devopsdays.org/events/2018-seattle/speakers/jen-tong/">...</a></span>
  </div>
  </div><div class="row cta-row">
            
            <div class="col-md-12"><h4 class="sponsor-cta">Gold Sponsors</h4><a href = "/events/2018-seattle/sponsor" class="sponsor-cta"><i>Join as Gold Sponsor!</i>
                    </a></div>
            </div><div class="row sponsor-row"><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://gocd.org/"><img src = "/img/sponsors/thoughtworks-gocd-before-20190213.png" alt = "GoCD" title = "GoCD" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.rei.com/"><img src = "/img/sponsors/rei.png" alt = "REI" title = "REI" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://tmobile.careers/meet-our-teams/technology"><img src = "/img/sponsors/t-mobile.png" alt = "T-Mobile" title = "T-Mobile" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.scalyr.com"><img src = "/img/sponsors/scalyr.png" alt = "Scalyr" title = "Scalyr" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.slalom.com/"><img src = "/img/sponsors/slalom.png" alt = "Slalom" title = "Slalom" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.influxdata.com/"><img src = "/img/sponsors/influxdata.png" alt = "InfluxData" title = "InfluxData" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.pagerduty.com/"><img src = "/img/sponsors/pagerduty.png" alt = "PagerDuty" title = "PagerDuty" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://infogroupnw.com/"><img src = "/img/sponsors/ignw.png" alt = "ignw" title = "ignw" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.ca.com/"><img src = "/img/sponsors/ca_tech.png" alt = "CA Technologies" title = "CA Technologies" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://chef.io"><img src = "/img/sponsors/chef.png" alt = "Chef Software, Inc" title = "Chef Software, Inc" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.appdynamics.com/"><img src = "/img/sponsors/appdynamics-before-20190121.png" alt = "AppDynamics" title = "AppDynamics" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.extrahop.com/"><img src = "/img/sponsors/extrahop.png" alt = "ExtraHop" title = "ExtraHop" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.opsgenie.com"><img src = "/img/sponsors/opsgenie.png" alt = "OpsGenie" title = "OpsGenie" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.sumologic.com/"><img src = "/img/sponsors/sumologic-before-20181203.png" alt = "SumoLogic" title = "SumoLogic" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.mabl.com"><img src = "/img/sponsors/mabl.png" alt = "Mabl" title = "Mabl" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://portworx.com/use-case/kubernetes-storage/"><img src = "/img/sponsors/portworx.png" alt = "portworx" title = "portworx" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.dellemc.com"><img src = "/img/sponsors/dellemc.png" alt = "Dell EMC" title = "Dell EMC" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.launchdarkly.com/"><img src = "/img/sponsors/launch-darkly-before-20200828-before-20180423.png" alt = "launch-darkly-before-20200828" title = "launch-darkly-before-20200828" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.gettyimages.com/"><img src = "/img/sponsors/getty-images.png" alt = "Getty Images" title = "Getty Images" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.victorops.com"><img src = "/img/sponsors/victorops-before-20180823.png" alt = "VictorOps" title = "VictorOps" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.tasktop.com/"><img src = "/img/sponsors/tasktop.png" alt = "TaskTop" title = "TaskTop" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.jfrog.com/"><img src = "/img/sponsors/jfrog.png" alt = "jfrog" title = "jfrog" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.elastic.co"><img src = "/img/sponsors/elastic.png" alt = "Elastic" title = "Elastic" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.dynatrace.com/"><img src = "/img/sponsors/dynatrace.png" alt = "Dynatrace" title = "Dynatrace" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.newrelic.com/culture"><img src = "/img/sponsors/newrelic.png" alt = "New Relic" title = "New Relic" class="img-fluid"></a>
                </div></div><div class="row cta-row">
            
            <div class="col-md-12"><h4 class="sponsor-cta">Silver Sponsors</h4><a href = "/events/2018-seattle/sponsor" class="sponsor-cta"><i>Join as Silver Sponsor!</i>
                    </a></div>
            </div><div class="row sponsor-row"><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.techtowntraining.com/"><img src = "/img/sponsors/techtown-before-20190407.png" alt = "TechTown Training" title = "TechTown Training" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.rightstar.com"><img src = "/img/sponsors/rightstar-before-20180814.png" alt = "Right Star Systems" title = "Right Star Systems" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.contrastsecurity.com/"><img src = "/img/sponsors/contrast_security.png" alt = "Contrast Security" title = "Contrast Security" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "http://www.cloudbees.com/"><img src = "/img/sponsors/cloudbees.png" alt = "cloudbees" title = "cloudbees" class="img-fluid"></a>
                </div></div><div class="row cta-row">
            
            <div class="col-md-12"><h4 class="sponsor-cta">Bronze Sponsors</h4><a href = "/events/2018-seattle/sponsor" class="sponsor-cta"><i>Join as Bronze Sponsor!</i>
                    </a></div>
            </div><div class="row sponsor-row"><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.realself.com/about/jobs"><img src = "/img/sponsors/realself.png" alt = "realself" title = "realself" class="img-fluid"></a>
                </div><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://codefresh.io/"><img src = "/img/sponsors/codefresh.png" alt = "codefresh" title = "codefresh" class="img-fluid"></a>
                </div></div><div class="row cta-row">
            
            <div class="col-md-12"><h4 class="sponsor-cta">Community Sponsors</h4><a href = "/events/2018-seattle/sponsor" class="sponsor-cta"><i>Join as Community Sponsor!</i>
                    </a></div>
            </div><div class="row sponsor-row"><div class = "col-lg-1 col-md-2 col-4">
                  <a href = "https://www.meetup.com/Seattle-CoffeeOps/"><img src = "/img/sponsors/seattle-coffeeops-before-20190213.png" alt = "Seattle CoffeeOps" title = "Seattle CoffeeOps" class="img-fluid"></a>
                </div></div><br />
  </div></div>
        </div>
  <nav class="navbar bottom navbar-light footer-nav-row" style="background-color: #bfbfc1;">
    <div class = "row">
      <div class = "col-md-12 footer-nav-background">
        <div class = "row">
              <div class = "col-md-6 col-lg-3 footer-nav-col">
        <h3 class="footer-nav">@DEVOPSDAYS</h3>
        <div>
            <a class="twitter-timeline" data-dnt="true" href="https://twitter.com/devopsdays/lists/devopsdays" data-chrome="noheader" height="440"></a>
  
            <script>
                ! function(d, s, id) {
                    var js, fjs = d.getElementsByTagName(s)[0],
                        p = /^http:/.test(d.location) ? 'http' : 'https';
                    if (!d.getElementById(id)) {
                        js = d.createElement(s);
                        js.id = id;
                        js.src = p + "://platform.twitter.com/widgets.js";
                        fjs.parentNode.insertBefore(js, fjs);
                    }
                }(document, "script", "twitter-wjs");
            </script>
        </div>
    </div>
    <div class="col-md-6 col-lg-3 footer-nav-col footer-content">
      <h3 class="footer-nav">BLOG</h3><a href = "https://www.devopsdays.org/blog/2019/05/10/10-years-of-devopsdays/"><h1 class = "footer-heading">10 years of devopsdays</h1></a><h2 class="footer-heading">by Kris Buytaert - 10 May, 2019</h2><p class="footer-content">It&rsquo;s hard to believe but it is almost 10 years ago since #devopsdays happened for the first time in Gent. Back then there were almost 70 of us talking about topics that were of interest to both Operations and Development, we were exchanging our ideas and experiences `on how we were improving the quality of software delivery.
  Our ideas got started on the crossroads of Open Source, Agile and early Cloud Adoption.</p><a href = "https://www.devopsdays.org/blog/"><h1 class = "footer-heading">Blogs</h1></a><h2 class="footer-heading">10 May, 2019</h2><p class="footer-content"></p><a href="https://www.devopsdays.org/blog/index.xml">Feed</a>
    </div>
    <div class="col-md-6 col-lg-3 footer-nav-col">
        <h3 class="footer-nav">CFP OPEN</h3><a href = "/events/2019-campinas" class = "footer-content">Campinas</a><br /><a href = "/events/2019-macapa" class = "footer-content">Macapá</a><br /><a href = "/events/2019-shanghai" class = "footer-content">Shanghai</a><br /><a href = "/events/2019-recife" class = "footer-content">Recife</a><br /><a href = "/events/2020-charlotte" class = "footer-content">Charlotte</a><br /><a href = "/events/2020-prague" class = "footer-content">Prague</a><br /><a href = "/events/2020-tokyo" class = "footer-content">Tokyo</a><br /><a href = "/events/2020-salt-lake-city" class = "footer-content">Salt Lake City</a><br />
        <br />Propose a talk at an event near you!<br />
    </div>
    <div class="col-md-6 col-lg-3 footer-nav-col">
      <h3 class="footer-nav">About</h3>
      devopsdays is a worldwide community conference series for anyone interested in IT improvement.<br /><br />
      <a href="/about/" class = "footer-content">About devopsdays</a><br />
      <a href="/privacy/" class = "footer-content">Privacy Policy</a><br />
      <a href="/conduct/" class = "footer-content">Code of Conduct</a>
      <br />
      <br />
      <a href="https://www.netlify.com">
        <img src="/img/netlify-light.png" alt="Deploys by Netlify">
      </a>
  </div>
      </div>
    </div>
  
    </div>
  
  </nav>
  <script>
  
  
  
  $(document).ready(function () {
    
  
    $("#share").jsSocials({
        shares: ["email", {share: "twitter", via: 'DevOpsDaysSEA'}, "facebook", "linkedin"],
        text: 'devopsdays Seattle - 2018',
        showLabel: false,
        showCount: false
    });
  });
  
  </script>
  </body>
  </html>
  