Strong phishing resistant MFA for the AI age — in six small and durable form factors
In an age of deepfakes and digital deception, hardware keys provide the only unphishable anchor for identity security, neutralizing AI threats through physical, hardware-attested proof of presence.
The YubiKey stores the authentication secret on a secure element hardware chip. This secret is never transmitted and therefore cannot be copied or stolen.
The YubiKey 5 FIPS Series lineup makes it easy to deploy strong, scalable authentication that eliminates account takeovers from phishing attacks. The YubiKey combines hardware-based authentication and public key cryptography to ensure strong authentication and eliminate account takeovers.
Protect your organization with the FIPS 140-3 Overall Levels 1 and 2, Physical Security Level 3 validated version of the industry leading YubiKey multi-factor authentication solution.
Available in a choice of six form factors that enable users to connect via USB-A, USB-C, NFC and Lightning. The YubiKey 5 NFC FIPS, YubiKey 5C NFC FIPS, YubiKey 5Ci FIPS and YubiKey 5C FIPS conveniently fit on a keyring, while the YubiKey 5 Nano FIPS and YubiKey 5C Nano FIPS are designed to remain in the USB port. This ensures every YubiKey is easy to access and provides the same level of digital security.
USB-A, Near Field Communication (NFC)
USB-C, Near Field Communication (NFC)
USB-C, Lightning
USB-C
USB-A
USB-C
YubiKey 5 Series is the most versatile security key supporting multiple authentication protocols including FIDO2/WebAuthn (hardware bound passkey), FIDO U2F, Yubico OTP, OATH-TOTP, OATH-HOTP, Smart card (PIV) and OpenPGP. A single key can access several modern and legacy systems, which eliminates the need for separate keys or extra integration work.
Supports passwordless secure login with FIDO2/WebAuthn authentication. Can store up to 100 hardware bound passkeys.
Includes Smart Card functionality based on the PIV interface specified in NIST SP 800-73. Supports passwordless secure login with Smart Card.
Supports OpenPGP, offering hardware-bound RSA/ECC cryptography and strict PIN enforcement for unphishable enterprise protection.
Can securely store 64 OATH-TOTP/HOTP credentials on-device, offering hardware-backed, phishing-resistant one-time passcodes compatible with the Yubico Authenticator app.
Supports two programmable slots for Yubico OTP, generating encrypted, 128-bit one-time passcodes with a simple touch for software-free enterprise authentication.
Provides secure Challenge-Response and Static Password functionality, letting users instantly authenticate or fill passwords with a simple, software-free physical touch.
Users don't need to install anything — customers or employees simply register their own YubiKey, enter their username and password as usual, and plug in and tap the YubiKey when prompted.
YubiKey hardware is reliable because it does not require a battery or network connectivity, so it's always on and accessible.
Authentication is fast with a simple touch that is four times faster than SMS and mobile two-factor authentication.
High quality design and resistant to tampering, water, and crushing. The YubiKey 5 NFC FIPS / 5 Nano FIPS are crush-resistant and water-resistant.
Water/dust resistance
Crush resistance
USB insertion cycles
Mean Time Between Failure (MTBF)
Full-size models take a keyring loop, so the key travels with the things you already never leave behind.
Nano models sit almost flush and are designed to stay put in a desktop or docked laptop.
The 5C Nano FIPS measures 12 x 10.1 x 7 mm and weighs a single gram.
NFC models authenticate on NFC-enabled Android and iOS devices with a tap - no cable required.
1
Log in to the service you want to secure and check if it supports security keys.
2
Go to the security settings and look for the option to add two-factor authentication or security keys. Setup instructions may vary.
3
Follow the instructions to register your YubiKey by plugging it in or tapping it on your device.
4
Remember to register a spare key in case of loss or theft of your primary key.
Works across major operating systems including Microsoft Windows, macOS, Android and Linux, as well as leading browsers.
Facebook, Twitter, Google Account, Microsoft account, Salesforce.com, Dropbox, Keeper®, 1Password, Bitwarden Premium, AWS Identity and Access Management (IAM), Duo Security, Forgerock, Idaptive, Microsoft Azure AD, Okta, OneLogin, Ping Identity.














