Bellingcat Case Study on YubiKey Implementation

This case study details Bellingcat's implementation of YubiKey for enhancing security in investigative journalism. Founded in 2014, Bellingcat is a non-profit collective focused on open source research, often facing threats from state-sponsored actors and organized crime due to their work. The Information Security Officer identified significant risks associated with phishing and weak passwords, leading to the decision to adopt YubiKeys as a robust multi-factor authentication solution. The YubiKey was chosen for its phishing-resistant capabilities and ease of use, essential for a team with varying levels of tech-savviness. All team members were required to use YubiKeys, which significantly reduced account lockouts and improved authentication processes. The study also highlights Bellingcat's collaboration with Yubico’s Secure It Forward program to bolster cybersecurity measures. The YubiKey has become integral to Bellingcat's operations, allowing the organization to maintain its mission while ensuring staff safety and data security in a high-threat environment.