
Google’s official documentation tells users to search for FIDO U2F Security Key on Amazon and buy one. A FIDO U2F security key: You’ll need the physical authentication token to get started.To get started, you’ll need just a few things:

To assign one key to multiple account, you just plug in keys while the same QR code is showing, and use the Yubico Authenticator to snap the QR code to assign.RELATED: U2F Explained: How Google and Other Companies Are Creating a Universal Security Token With this way (YubiKey + Yubico Authenticator), you can even set up one key to one account, one key to multiple accounts, multiple keys to one account, and multiple keys to multiple accounts. This means it only shows the related accounts to the key and no more. All the accounts (seeds) are planted into the key itself. You simply download an app called Yubico Authenticator. Although it is an U2F device, it actually can be used as a Virtual MFA Device (sorry that you can only pick one method as AWS allows you to use one way). One thing I want to point out here is the YubiKey. One key per account which is not so convenient if you need to manage multiple accounts. The device has a display to show the code that you can authenticate yourself.


Virtual MFA Device: This is those authenticator apps that you can find and install from an app store on your device.Currently, there are three ways that allow you to setup root accounts in AWS.
