Cloudflare Makes Hardware Security Keys More Accessible For Millions Of Customers


Collaborates with Yubico for exclusive offering to help end phishing attacks once and for all

Cloudflare, Inc., the security, performance, and reliability company helping to build a better Internet, announced a new offering to make physical security keys the most accessible and economical solution for customers to secure their business and employees better. Cloudflare customers will be able to purchase Yubico’s security keys, the leading hardware security keys and most secure form of phishing-resistant multi-factor authentication (MFA), at an exclusive ‘good for the Internet’ cost.

Zero Trust security model means that no one is trusted, by default, regardless if they’re inside or outside of a corporate network. As such, verification is required from everyone trying to gain access to resources on that organisation’s network, including location, familiar devices, and passwords. Today, hardware security keys are an additional layer of protection and a method of MFA that has been proven phishing-resistant.

Cloudflare customers will be able to claim an offer for Yubico’s Security Key Series at highly discounted prices – as low as $10 – through their Cloudflare dashboard. Larger organisations using Cloudflare and purchasing a multi-year YubiEnterprise Subscription for YubiKeys will receive a 50 per cent discount off their first year of a 3+ year subscription. This collaboration aims to make it simple and seamless for organisations of all sizes to acquire, activate, and authenticate with security keys.

In July, Cloudflare prevented a breach by an SMS phishing attack that targeted more than 130 companies due to the company’s use of Cloudflare Zero Trust paired with YubiKeys. Physical security keys strengthen the barrier against attacks and work in conjunction with additional security measures such as DNS filtering, browser isolation, cloud email security, and more, where an attacker would need to compromise every signal.

“We’re always asking ourselves how we can do even more to provide the best possible security to our customers and the Internet at large. With phishing attacks on the rise, this means helping to democratise additional security measures to complement the Cloudflare Zero Trust experience. We experienced this first hand and wanted to make implementing hardware security keys a no-brainer for any organisation,” said Dane Knecht, SVP, Emerging Technology and Incubation at Cloudflare. “Working with Yubico is just another way we’re trying to make it as seamless as possible to arm our customers with the best Zero Trust security strategy. Being a Cloudflare Zero Trust customer introduces an easy, fast and affordable way to implement security keys in your organisation, and all part of our greater mission to help build a better Internet.”

With Yubico, Cloudflare is ensuring physical security keys are:

  • Economical:Rolling out security keys can be difficult for companies with smaller security teams or those that have just begun using two-factor authentication. By offering security keys at the most affordable rate, this offer makes the keys less of a financial burden on small companies.
  • Accessible:Now, Cloudflare customers can order Security Key Series, supporting FIDO-based authentication, directly through their dashboard. The YubiKey 5 Series, available through YubiEnterprise Subscription, supports multiple authentication protocols, from legacy applications to modern FIDO-based apps and services. The exclusive ‘good for the Internet’ pricing helps introduce hardware keys’ value and functionality to Cloudflare customers.
  • Simple to use:Setting up security keys is easy for participating Cloudflare customers. For Administrators, Cloudflare Zero Trust makes it easy to use your security keys with any Identity Provider (IdP) and integrates both the keys and IdP into a comprehensive Zero Trust solution. For employees, a simple guided prompt makes the action of touching a security key for authentication seamless. Security keys work across all devices, operating systems, and areas within an organisation.

“Yubico pioneered the modern security key, the YubiKey, and continues to set the industry standard, protecting enterprise customers and consumers from security threats,” said Stina Ehrenvard, CEO and co-founder, Yubico. “Today’s attacks require modern MFA. Working with Cloudflare will help get more Security Keys and YubiKeys into the hands of their customers to deliver on the combination of phishing-resistant MFA and provide peace of mind.”