

It’s often easier to get someone’s password through a process of social engineering or phishing than it is to brute-force through encryption.

The problem is that anyone with the necessary passwords can still gain access. Let’s assess all sides of the matter and then determine if you need YubiKey to help protect your encrypted emails. Your current situation is also a crucial consideration in making this decision. Understanding the purpose of YubiKey, together with the limitations of encrypted email, is essential to determining whether YubiKey is worth it for encrypted email. Still, the added cost and limited mobile device support make it impractical for most home users. Those with very sensitive emails may find YubiKey worth it for the improved security.

YubiKey is effective at adding an additional layer of security to an already secure platform like encrypted email. YubiKey is one way to make 2FA work for you, but would it be worth it to get a YubiKey for encrypted email? But if two-factor authentication (2FA) is an option, it is always better to have that extra layer of security. Creating a strong password and using password managers is essential. Good password practices are the first step to keeping your emails and files secure.
