
A YubiKey is a small hardware device that proves who you are with a single touch. Here's how its phishing resistance actually works, how it compares to authenticator apps and passkeys, and which accounts are worth the €25–€70.
Author
154 articles
Milan Buha is the founder and editor of VoidInsider. Curious by default, he likes understanding things from the inside — the technology he depends on every day, the systems behind everyday money decisions, the fine print everyone else skips. He writes about what he's tried, checked, and actually uses, the way he'd explain it to a friend.

A YubiKey is a small hardware device that proves who you are with a single touch. Here's how its phishing resistance actually works, how it compares to authenticator apps and passkeys, and which accounts are worth the €25–€70.

You have the key, now what? A walkthrough for registering GitHub and Google 2FA plus a real FIDO2 SSH login (ssh-keygen -t ed25519-sk), in the order that keeps you from locking yourself out.

Six similarly-named YubiKey SKUs, no obvious pick. Three questions narrow it to one model, with real current pricing and the Bio Series distinction most comparison articles get wrong.

A real router admin panel, walked through step by step: default credentials, firmware, WPA3, WPS, UPnP, remote access, and VLAN segmentation for IoT — with the reasoning for each change.

WPA3 beats WPA2 on paper, but older IoT devices can silently drop off a WPA3-only network. What actually changed, and how to run a safe WPA2/WPA3 transition network.

Most routers never get a single firmware update after setup day. A real CVE that got exploited because of it, a five-minute walkthrough, and which brands actually keep patching.

Fixed one privacy weak point and wondering what else is exposed? A prioritized, effort-vs-impact toolkit synthesizing password managers, authenticators, browsers, messaging, DNS, and self-hosting into one ordered plan.

PrivateBin encrypts pastes in your browser before they ever reach the server — the decryption key never leaves the URL fragment. A real Docker Compose deployment and why it beats a public pastebin.

Encrypted DNS hides your queries from your ISP, but not your destination IP or (usually) the domain in the TLS handshake. What it actually protects, and a first-hand Pi-hole + Unbound setup.

Credit freezes have been free by federal law since 2018. A real cost comparison of paid identity theft protection against the free DIY path, and the narrow cases where paying still earns its price.

Losing your phone is the real test of any authenticator app. Aegis, Authy, and Google Authenticator compared on backup encryption, recovery friction, and the 2024 Authy breach that exposed 33 million phone numbers.

A breach-notification email lands — "your password was exposed" — and the reflex is to Google "private email provider" at 11pm. Here is what actually differs between Proton Mail and Tutanota day to day, and who genuinely needs to switch.