anchor.diff:  ### Choosing a USB Key
   {: .clear }
   
  -We prefer the [Kingston DataTraveler](http://www.amazon.com/Kingston-Digital-DataTraveler-DTSE9H-16GBZET/dp/B00DYQYITG) drive due to its size and cost.  Once you've found a USB keychain drive to your liking, you'll want to reformat it using OS X's built-in encrypted filesystem.
  +We prefer the [Kingston DataTraveler](http://www.amazon.com/Kingston-Digital-DataTraveler-DTSE9H-16GBZET/dp/B00DYQYITG) drive due to its size and cost.  Once you've found a USB keychain drive to your liking, you'll want to reformat it using macOS's built-in encrypted filesystem.
   
   ### Format the Drive
   
  
positive.code: <%= img("Erase", "keychain.jpg") %>
  {: .img_right }
  
  Working on a Platform like [Cloud Foundry](http://pivotal.io/platform), which is relied upon by a growing community of "serious" companies requires us to take security seriously as well.  
  
  > Security is something you know, something you have, and something you are.
  
  The commonly agreed upon tenants of strong security is that it requires a combination of "something you know, something you have, and something you are."  Two factor authentication includes both of those - usually something you know and something you have.  
  
  Here's how we've implemented two factor authentication across the board for our SSH keys using [USB keychain drives](http://www.amazon.com/Kingston-Digital-DataTraveler-DTSE9H-16GBZET/dp/B00DYQYITG).  This strengthens our access to Github repositories and the numerous deployments we manage.
  
  
negative.code: |                 |
  +-----------------+
  ```
  
  Then add the newly-created public key to [your Github account](https://github.com/settings/keys)
  
  ### Script to Load Keys and Eject
  
  