What is a Yubico Security Key?
A security key is a small hardware device that proves your identity when you log in. Instead of typing a code from an app or SMS, you plug the key in or tap it via NFC and touch it. The Yubico Security Key range is the affordable, FIDO-only line: it delivers phishing-resistant two-factor and passwordless (passkey) login across hundreds of services, from Google and Microsoft to your password manager and bank.
FIDO2 and U2F: phishing-resistant by design
Every key in this range supports FIDO2, WebAuthn and U2F. When you register a key, it ties itself to the exact web address of the service. Log in on a fake phishing page and the key simply will not respond, because the address is wrong. There is no code to read out and nothing for an attacker to steal. Want the full explainer? Read our guide: What is a FIDO2 security key?.
USB-A or USB-C: which security key do I need?
Both keys include NFC for tap-to-authenticate on any phone, so the only choice is the plug that matches your computer. Pick Security Key NFC (USB-A) for desktops, docks and older laptops, or Security Key C NFC (USB-C) for modern laptops, MacBooks and USB-C phones.
Security Key vs YubiKey 5 Series
The Yubico Security Key range covers phishing-resistant 2FA and passwordless login, which is everything most individuals and small businesses need. If you require extra protocols such as Smart Card (PIV), OpenPGP or OTP for enterprise, developer or government use, step up to the YubiKey 5 Series.
What can you protect?
One security key secures hundreds of services, including:
- Google, Gmail and Google Workspace
- Microsoft account and Microsoft 365
- Apple ID
- Password managers (1Password, Bitwarden, Keeper, LastPass)
- Social accounts (Facebook, Instagram, X, LinkedIn)
- Developer and cloud tools (GitHub, AWS, Okta)
Register the key once per service, and add a second key as a backup so you are never locked out.
