YubiKey
Hardware security keys from Yubico supporting FIDO2/WebAuthn, PIV, and OTP for phishing-resistant authentication.
Technical Architecture & Overview
YubiKeys are hardware authenticators that bind login to physical presence, supporting FIDO2/WebAuthn, FIDO U2F, smart card (PIV), OpenPGP, and Yubico OTP protocols across USB-A, USB-C, NFC, and biometric form factors. The Security Key series provides FIDO-only models at lower cost for large rollouts, while the YubiKey 5 series covers the full protocol set. Yubico originated the U2F standard with Google.
Targeted Technical Use Cases
Phishing-resistant MFA for administrators, executives, and workforce rollouts that require hardware-backed identity.
Evaluation & Trade-offs
Core Strengths
- +Authentication resists phishing and AiTM token theft by design.
- +Multi-protocol support in one device.
- +Affordable FIDO-only models for volume deployment.
Trade-Offs & Limitations
- -Physical loss and replacement logistics.
- -Legacy OTP use cases need careful configuration.
Defensive Security Application
Eliminating credential phishing as an attack path for privileged and standard users.
Frequently Asked Questions
What is YubiKey?→
YubiKeys are hardware authenticators that bind login to physical presence, supporting FIDO2/WebAuthn, FIDO U2F, smart card (PIV), OpenPGP, and Yubico OTP protocols across USB-A, USB-C, NFC, and biometric form factors. The Security Key series provides FIDO-only models at lower cost for large rollouts, while the YubiKey 5 series covers the full protocol set. Yubico originated the U2F standard with Google.
What is YubiKey used for?→
Phishing-resistant MFA for administrators, executives, and workforce rollouts that require hardware-backed identity.
What are the strengths of YubiKey?→
- +Authentication resists phishing and AiTM token theft by design.
- +Multi-protocol support in one device.
- +Affordable FIDO-only models for volume deployment.
What are the limitations of YubiKey?→
- +Physical loss and replacement logistics.
- +Legacy OTP use cases need careful configuration.
How is YubiKey used defensively?→
Eliminating credential phishing as an attack path for privileged and standard users.