Vision: I don’t want to use my Phone! A Cognitive Walkthrough for YubiKeys


Security keys can be used as a second factor when users aim at securing their online accounts or devices in addition to passwords. In this vision paper, we made the first step to identify common issues when registering a YubiKey as second factor on Google, Facebook, Windows 10 and Ubuntu 18.04.4 accounts by a cognitive walkthrough. We found the websites to be too phone-centered and the instructions for operating systems too complex and incomplete at the same time. We therefore plan to analyze further websites to identify the most usable implementation for each step of the registration process, in order to combine those into an improved overall solution.

Proceedings of the 2020 IEEE European Symposium on Security and Privacy Workshops
Eva Gerlitz
Eva Gerlitz
Ph.D. Student