Prairie Light Press Reader Preview of:
Guard Your Money
The Simple YubiKey Guide to Financial Security
Preview
Guard Your Money
The Simple YubiKey Guide to Financial
The following pages are an exclusive preview of Guard Your Money: The Simple YubiKey Guide to Financial
Exclusive Preview from Prairie Light Press
Guard Your Money
The Simple YubiKey Guide for Financial Security
Your Complete Guide to Protecting Your Accounts from Hackers, Phishing, and Fraud
Copyright © 2026 L. Phillips
All rights reserved
Second Edition.
English Edition
No part of this book may be reproduced, distributed, transmitted, or stored in any form or by any means, electronic or mechanical, including photocopying, recording, or any information storage and retrieval system, without prior written permission from the author, except for brief quotations in reviews.
Disclaimer
The information in this book is provided for educational and informational purposes only. While every effort has been made to ensure accuracy, technology and security practices evolve over time.
The author makes no guarantees regarding the effectiveness of any tools, techniques, or strategies discussed and assumes no responsibility for errors, omissions, or outcomes resulting from the use of this information.
Readers are encouraged to evaluate their own circumstances and, where appropriate, consult qualified professionals before implementing security, financial, or technical decisions.
Non-Affiliation Notice
This book is an independent publication and is not affiliated with, endorsed by, or sponsored by any company or organization mentioned herein, including but not limited to Bitwarden or Yubico.
All product names, trademarks, and registered trademarks are the property of their respective owners and are used for identification and educational purposes only.
Publisher Information
Published independently by
Prairie Light Press
United States of America
Table of Contents
Introduction: Why Your Money Isn't Safe (And How to Fix It)
Let me ask you something: How much money do you have in your bank account right now? Your investment accounts? Your retirement savings?
Now imagine waking up tomorrow morning, checking your phone, and seeing that it's all gone. Every penny. Transferred to someone you've never met, in a country you've never visited.
Sound like a nightmare? It happened to Sarah, a 52-year-old teacher from Ohio. She thought she was logging into her bank's website—it looked identical to the real thing. She entered her username and password like she'd done a thousand times before. Within 30 minutes, $43,000 was gone from her savings account.
Or how about Tom, a retired veteran who had his entire retirement account at Schwab drained after someone intercepted a text message code sent to his phone. The thieves used something called 'SIM swapping' to take over his phone number, and the bank's text message security didn't stand a chance.
These aren't rare cases. In 2024 alone, Americans lost over $12.5 billion to online fraud and cybercrime. That's billion with a 'B.' And it's getting worse every single day.
The Problem Is Simple
Your passwords aren't enough anymore. Even if you use a different password for every account (and let's be honest, most people don't), hackers have gotten incredibly sophisticated. They can:
Send you emails that look EXACTLY like they're from your bank
Create fake websites that are pixel-perfect copies of the real thing
Intercept the 'security codes' sent to your phone via text message
Install invisible malware on your computer that records everything you type
Hijack your phone number so THEY receive your security codes
The scariest part? You can do everything right—use strong passwords, be careful about emails, keep your software updated—and STILL get hacked. Because the system itself is broken.
But There's a Solution
This book is about one simple device that changes everything: the YubiKey.
Think of a YubiKey like a physical key for your online accounts. It's a small device, about the size of your car key fob, that you plug into your computer or tap on your phone. Without it, nobody—and I mean NOBODY—can access your money, even if they have your password.
Not the hacker in Russia who phished your password.
Not the scammer who cloned your phone.
Not even the sophisticated criminal who installed malware on your laptop.
If they don't have your physical YubiKey in their hands, they can't get to your money. Period.
Who This Book Is For
This book is for regular people who want to protect their money without becoming computer experts. You don't need to understand encryption algorithms or cryptographic protocols. You just need to follow simple, step-by-step instructions.
If you:
Have money in a bank account, investment account, or retirement fund
Want to sleep better at night knowing your finances are protected
Are tired of worrying about getting hacked or scammed
Don't want to become a tech expert just to stay safe
...then this book is for you.
What You'll Learn
By the end of this book, you'll know exactly how to:
Buy the right YubiKey for your needs (they're surprisingly affordable)
Set it up with your bank, investment accounts, email, and password manager
Create a backup YubiKey and store it safely (this is crucial!)
Use your YubiKey every day without any hassle
Protect your entire family's financial accounts
Recover if something goes wrong
I'll give you specific, step-by-step instructions for the major financial institutions: Chase, Bank of America, Wells Fargo, Vanguard, Fidelity, Schwab, and JPMorgan Chase. No technical jargon. No confusing terms. Just simple, clear directions that anyone can follow.
A Small Investment for Huge Peace of Mind
A YubiKey costs between $25 and $70 depending on the model. That's it. One-time purchase. No monthly fees. No subscriptions.
Compare that to the billions of dollars lost to cybercrime every year, and it's the easiest decision you'll ever make.
So let's get started. Your money is waiting to be protected, and it's easier than you think.
Turn the page, and let's make your financial accounts virtually unhackable.
Chapter 1: Understanding the Threats
Before we talk about the solution, you need to understand what you're up against. And I promise you, it's scarier than you think—but also more preventable than you might imagine.
Phishing: The Wolf in Sheep's Clothing
You've probably heard the term 'phishing' before. But let me show you how sophisticated it's become.
Here's what happened to Jennifer, a marketing director in Seattle:
She received an email that appeared to be from Chase Bank. The logo was perfect. The formatting was identical. The email address looked legitimate: 'security@chase-alerts.com'. The message said there was suspicious activity on her account and she needed to verify her identity immediately.
She clicked the link. The website looked EXACTLY like Chase's real website. She entered her username and password. Within seconds, the real criminals had her credentials and were logging into her actual account.
The kicker? The fake website even showed her real account balance (they grabbed it in real-time after she logged in), so she had no idea anything was wrong. By the time she realized what happened, $18,000 had been wire transferred out of her account.
⚠️ WARNING: Modern phishing emails are nearly impossible to detect by eye. Even security professionals get fooled.
Malware: The Silent Thief
Malware is malicious software that gets installed on your computer without you knowing. It can:
Record every keystroke you type (including passwords)
Take screenshots of your banking sessions
Modify websites you visit to steal your information
Run completely invisibly in the background for months
How does it get on your computer? Sometimes from shady websites, but often from sources you trust:
Fake software updates that look legitimate
Email attachments from addresses that appear to be from friends
Infected USB drives
Even compromised legitimate websites you visit regularly
SIM Swapping: When Your Phone Number Betrays You
This one is particularly nasty because it exploits a security measure that's supposed to PROTECT you: text message verification codes.
Here's how it works:
A scammer calls your cell phone carrier pretending to be you
They claim they 'lost' their phone and need to transfer your number to a new SIM card
They provide just enough personal information (often gathered from social media or data breaches) to convince the carrier they're really you
The carrier transfers your phone number to a SIM card that the criminal controls
Now when your bank sends a 'security code' via text message, the criminal receives it—not you
They drain your accounts while you're left wondering why your phone suddenly stopped working
This happened to Michael Terpin, a cryptocurrency investor, who lost $24 million in a single SIM swap attack. But it's not just happening to rich people—everyday Americans lose thousands of dollars to this scam every single day.
Password Database Breaches
Even if YOU do everything right with your passwords, the companies you trust might not.
Major data breaches in recent years:
Yahoo: 3 billion accounts
LinkedIn: 700 million accounts
Adobe: 153 million accounts
Home Depot: 56 million payment cards
When these breaches happen, criminals get access to usernames, passwords, email addresses, and sometimes even credit card information. Then they try those same credentials on OTHER websites, betting (correctly) that most people reuse passwords.
If you used the same password for LinkedIn that you use for your bank? They're in.
The Shocking Statistics
Let's talk numbers, because they're staggering:
81% of data breaches are caused by weak, reused, or stolen passwords (Verizon, 2024)
Americans lost $12.5 billion to cybercrime in 2024
The average cost of a data breach for a company: $4.45 million
95% of cybersecurity breaches are caused by human error
A new phishing website is created every 20 seconds
And here's the stat that should really wake you up: The FBI reports that people over 60 lost $3.4 billion to internet scams in 2023 alone. Criminals specifically target older Americans because they tend to have more savings and may be less familiar with online security.
Why Traditional Security Doesn't Work Anymore
'Strong passwords' aren't enough. Even if you create a password like 'Xk#9mP$2qL@7vN!5' and never write it down, it can still be:
Phished (you type it into a fake website)
Keystroke-logged by malware
Stolen in a database breach
Intercepted if the website doesn't use proper encryption
'Security questions' are a joke. What was your first pet's name? Your mother's maiden name? The street you grew up on? This information is often publicly available on social media or can be easily guessed.
'Text message codes' can be intercepted through SIM swapping, as we discussed. They're better than nothing, but they're not secure enough for your money.
'Authenticator apps' (like Google Authenticator) are better than text messages, but they can still be compromised if your phone is stolen or hacked.
So What DOES Work?
Physical security keys like the YubiKey.
Here's why they're virtually unhackable:
Phishing doesn't work – Even if you enter your password on a fake website, the scammer can't use it without your physical key
Malware doesn't work – Recording your keystrokes is useless if they also need the physical device in your pocket
SIM swapping doesn't work – Your phone number is irrelevant when you're using a hardware key
Database breaches don't matter – Even if a company's password database is stolen, attackers still can't access your account without your key
Think of it this way: A burglar might pick your door lock, but they can't pick a lock that doesn't exist. With a YubiKey, there IS no lock for them to pick remotely. They would need to physically steal the device from you—and even then, they'd still need your password.
💡 TIP: Security experts and major corporations use hardware keys for a reason. Google has been using them internally since 2017 and reports ZERO successful phishing attacks against employees who use them.
In the next chapter, we'll talk about exactly what a YubiKey is and how it works. And don't worry—it's way simpler than you think.
Chapter 2: What Is a YubiKey? (In Plain English)
Alright, let's demystify this thing. If you've never heard of a YubiKey before, or if you have but you're not quite sure what it does, this chapter will make everything crystal clear.
The Car Key Analogy
Think about your car key. Even if someone knows:
Your car's make and model
Where you park it
Your license plate number
That you always keep the owner's manual in the glove box
...they STILL can't drive your car without the physical key, right?
A YubiKey works the same way for your online accounts. Even if hackers know:
Your username
Your password
Your email address
Your phone number
...they STILL can't access your account without the physical YubiKey that's in your pocket (or wherever you keep it safe).
What Does It Look Like?
A YubiKey is a small device, roughly the size of your car key fob or a USB flash drive. Most models are about 1.5 inches long and less than an inch wide. It's durable (you can literally put it through the washing machine and it'll still work), waterproof, and has no battery to charge.
The most common model has:
A USB connector (either USB-A or USB-C, just like a regular USB stick)
A gold circle or square on the flat surface (this is what you touch to activate it)
Optional NFC capability (for tapping on your phone)
There are no buttons to press, no screens to read, and nothing complicated about it. It's literally just a small piece of hardware that you plug in or tap when asked.
How It's Different From Text Message Codes
You might be thinking, 'But my bank already sends me security codes via text message. Isn't that good enough?'
Short answer: No. Here's why:
When your bank sends you a code via text message, that code is:
Traveling through the air (can be intercepted)
Stored on your phone (can be accessed if your phone is hacked)
Tied to your phone number (can be redirected via SIM swapping)
Vulnerable to social engineering attacks on your carrier
With a YubiKey:
Nothing travels through the air—the authentication happens directly between the key and the website
Nothing is stored anywhere—each authentication generates a unique, one-time cryptographic signature
Your phone number is irrelevant—the key doesn't use it
Nobody can call your carrier and trick them—there's no carrier involved
💡 TIP: The National Institute of Standards and Technology (NIST) recommends deprecating SMS-based authentication due to security vulnerabilities. Hardware keys like YubiKey are their recommended alternative.
The Science Made Simple (No Geek Speak, I Promise)
Okay, I know you didn't buy this book for a computer science lesson, but understanding the basics helps you trust the system. I'll keep this REALLY simple.
When you set up a YubiKey with, say, your bank:
The YubiKey and the bank exchange mathematical 'handshakes' (called cryptographic keys)
These handshakes are unique to YOUR YubiKey and YOUR bank account
Every time you log in, your YubiKey proves it's the same device without revealing any secret information
Even if hackers intercept the communication, they can't copy or reuse it
It's like having a secret handshake with your bank that changes every single time and can't be faked. Nobody else knows the handshake, and even if they watch you do it, they can't recreate it.
The beautiful part? You don't have to understand how it works. You just plug it in (or tap it), touch the gold circle, and you're authenticated. That's it.
Why Hackers Can't Fake It
Here's the crucial part: Unlike a password (which is just information that can be copied), a YubiKey uses physical hardware that generates unique cryptographic signatures.
To fake a YubiKey, a hacker would need to:
Steal or copy the mathematical secrets stored in the hardware (essentially impossible without physical access and specialized equipment)
Break the cryptographic algorithms (would take longer than the age of the universe with current computers)
Somehow predict the unique signature it will generate next (mathematically impossible)
Even nation-state actors with unlimited resources can't break this. That's why the U.S. government, major tech companies, and high-security organizations all use hardware security keys.
Which YubiKey Should You Buy?
Yubico (the company that makes YubiKeys) offers several models. Don't let the choices overwhelm you—I'll break it down simply.
The YubiKey 5 NFC – Best for Most People ($45)
This is the model I recommend for almost everyone. Here's why:
Works with computers (USB-A port, found on most computers)
Works with phones (NFC means you can tap it on your iPhone or Android)
Compatible with virtually every service that supports security keys
Durable and waterproof
No battery needed—it powers itself from the USB port
The YubiKey 5C NFC – For Newer Laptops ($55)
If your computer only has USB-C ports (the newer, smaller reversible port), get this model instead. It has all the same features as the 5 NFC, just with a USB-C connector.
The YubiKey 5Ci – For Apple Users ($70)
This one has both USB-C AND a Lightning connector, making it perfect for people with iPhones and iPads. It's the most versatile but also the most expensive.
The Security Key Series – Budget Option ($25-30)
If budget is tight, Yubico also makes a 'Security Key' series that's more affordable. These work great for basic protection but have fewer advanced features. For protecting your bank accounts, they're perfectly adequate.
💡 TIP: Not sure which USB port you have? Look at your computer's USB ports. USB-A is the rectangular port you've been using for years. USB-C is newer, smaller, and oval-shaped. Most computers have at least one USB-A port, but newer laptops might only have USB-C.
How Much Do They Cost?
Here's the straight pricing (as of 2025):
Security Key Series: $25-30
YubiKey 5 NFC: $45
YubiKey 5C NFC: $55
YubiKey 5Ci: $70
Remember, this is a ONE-TIME purchase. No subscriptions, no monthly fees, no annual renewals. You buy it once, and it lasts for years.
And here's my recommendation: Buy TWO. Yes, two. One for daily use, and one as a backup that you'll store somewhere safe (more on this in Chapter 6). So budget for roughly $100-$140 depending on which model you choose.
I know that might seem like a lot, but compare it to:
The $18,000 Jennifer lost to a phishing attack
The $43,000 Sarah lost when her password was compromised
The peace of mind knowing your life savings are protected
It's the cheapest insurance you'll ever buy.
Do You Really Need Two Keys?
Yes. Absolutely. 100% yes.
Here's why: If you only have one YubiKey and you lose it, you'll be locked out of all your accounts until you can go through lengthy recovery processes with each service. Some services make recovery difficult (on purpose, for security), and you might be locked out for days or even weeks.
With a backup key that's registered to all the same accounts:
You can access your accounts immediately if you lose your primary key
You can keep the backup in a safe place(home safe, safety deposit box, trusted family member's house)
You have peace of mind knowing you won't get locked out
Think of it like having a spare car key. You hope you never need it, but you're REALLY glad you have it when you lock your keys in the car.
In the next chapter, we'll walk through actually buying your YubiKeys and making sure you get authentic ones (yes, counterfeits exist, unfortunately).
End of Prairie Light Press Reader Preview
Contact Prairie Light Press
Have a question about one of our books?
Found an error or have feedback?
Interested in translations, bulk purchases, or media inquiries?
We'd love to hear from you.