Windows 10: Yubico 5 NFC with Windows Hello; never accepts pin but authenticates sites.

So my YubiKey security key may have been initially been installed on a different computer with my same username Microsoft account shows these two completely separate computers but this configuration neither authenticated via pin with my former install of windows on the computer I am sending this message from via Windows Hello, nor does it authenticate via Windows Hello with my new configuration. System info should be included here. I am now down to 1 try to enter a valid pin or the card will be blocked. It's really not that big of a problem because exiting out of Windows Hello allows acc

:)

 

LOG IN TO WINDOWS 10 WITH A YUBICO 5C NFC USB KEY

I wanted to hackproof my Home Windows 10 Desktop (which used a local password ) against hackers without having to type in a 16 -20 character password so I thought configuring my Windows log in to require a YUBIO 5C NFC USB KEY would be a way to keep my windows
log in password to a reasonable length .

I found this very good how to video on you tube entitled "

YUBIKEY WINDOWS 10 LOGIN" and I made careful notes >.HOWEVER THE AMAZON REVIEWS ABOUT USING THE 5C NFC TO LOG INTO WINDOWS 10 WERE SO NEGATIVE ! Is this because people di not study the above video before attempting to install the Yubico software for 64 bit
windows ? or is the Yubico >< Windows 10 relationship still too glitchy to trust this yet ? It seems as long as you Log into windows using a "LOCAL pass word " and not your Online Microsoft Account password that the YUBICO 5C NFC USB KEY works well logging
into your home windows 10 computer and my password and account name are local and I do not use Windows Hello.. But when I went to amazon to buy the required YUBICO 5C NFC USB KEY the reviews that mentioned using it to log into Windows 10 were mostly negative
one of the few positive amazon reviews --dated June 28 2020--- said " If you are planning to use his key as a way to log into Windows,
then it can be a challenge to setup. Took me a bit since there is a learning curve but overall I’m very happy with this product. Makes me feel good that my logins are secure"

but most were like this :

Save yourself from a nightmare

By New York Shopper (APRIL
20 ,2020 ) Believe me, this is not what you imagine. This device is not user friendly, and if you don't know how to get into safe mode to unlock your windows account,
don't even think about it.

You will spend hours reading documentation searching for information for you specific operating system and learning OTP, FIDO2, etc.

This is also not your password manager.

And last thing, widows 10 do not accept it as a login device, you will need to install their proprietary software.

After reading reviews like "New York Shoppers " Perhaps I should just rely on ,my new router ( aTP-Link SafeStream TL-R600VPN ) which has built in VPN , SPI firewall and DoS defense plus a 16-20 character passwords until reviews about the YUBICO 5C NFC
USB KEY logging into windows 10 turn more positive???

BTW how DOES one start windows 10 in safe mode if they are locked out of it? ( in order to unlock ones windows 10 account ) ?

 

Login with PIN and Hello

Hi Jean,

Windows 10 includes multiple options to sign-in to your account, including the ability to sign-in using a PIN and Windows Hello, which uses facial recognition. For us to provide a solution suited to your concern, we need additional information. Can
you answer the questions below?

• How are you setting the PIN and Hello?
• Which build version of Windows is your PC running on?
• Were there any error codes or messages?

In the meantime, we suggest that you follow the steps below on how to set up PIN.

• Open Settings.
• Select Accounts.
• Click Sign-in options.
• Click the Add button for the PIN and set your PIN.
• Do the same for the Windows Hello.

Looking forward to your response.

 

Windows Microsoft account authentication

I have a valid Microsoft account and a Windows 10 PC with Hello/PIN account login enabled. I also have the Microsoft Authenticator app installed on an iPhone and configured for the Microsoft account. Additionally, I have two step authentication configured
for the Microsoft account. With all of that said, I have become very exasperated while trying to unravel the various authentication paths (and their security implications) through this multi level login security scheme. I find the associated account security
documentation to be woefully inadequate. Thus, I would like to pose the following list of questions for starters.

1. Does Windows Hello/PIN amount to a two step verification login procedure for my Microsoft account?

2. Does approving a Microsoft Authenticator login attempt (without two step verification explicitly set up)

amount to a two step verification login procedure for my Microsoft account?

3. Does approving a Microsoft Authenticator login attempt (with two step verification explicitly set up)

amount to a two step verification login procedure for my Microsoft account?

4. If answers to both 2 and 3 are yes, then what does explicit set up of two step authentication do?

5. Does a coherent, comprehensive document explaining Microsoft account security configuration exist somewhere?

6. If the answer to 5 is yes, wherer is it?

Thanks in advance.