Skip to main content
TrustRadius
Yubico YubiKeys

Yubico YubiKeys

Overview

What is Yubico YubiKeys?

Yubico YubiKeys make the internet safer with phishing-resistant multi-factor authentication (MFA) by providing simple and secure access to computers, mobile devices, servers, and internet accounts. The Yubico YubiKey stops account takeovers at scale by mitigating phishing and ransomware attacks, and…

Read more
Recent Reviews

Yubico Review

8 out of 10
May 16, 2024
Incentivized
When we access sensitive servers, there is always a need to have a 2-step verification process. So one step is always what you know, which …
Continue reading
Read all reviews

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Reviewer Pros & Cons

View all pros & cons

Video Reviews

8 videos

Yubico YubiKey Review
05:09
Yubico YubiKey Review
06:57
Yubico YubiKey Review
04:58
Return to navigation

Pricing

View all pricing

Entry-level set up fee?

  • Setup fee optional
For the latest information on pricing, visithttps://www.yubico.com/yubienterprise…

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services

Starting price (does not include set up fee)

  • $3.94 per month per user
Return to navigation

Product Demos

Setting up the Security Key

YouTube
Return to navigation

Product Details

What is Yubico YubiKeys?

Yubico YubiKeys supports phishing-resistant multi-factor authentication (MFA) by providing simple and secure access to computers, mobile devices, servers, and internet accounts.

Stopping phishing attacks and account takeovers before they start
The Yubico YubiKey stops account takeovers at scale by mitigating phishing and ransomware attacks. And users experience fast and easy authentication with a simple touch or tap. For organizations that wish to secure sensitive data stored in servers, the YubiHSM offers an ultra-portable hardware security module, bringing great flexibility and affordability to any organization. For organizations that wish to secure sensitive data stored in servers, the YubiHSM offers a portable hardware security module, bringing great flexibility and affordability to any organization.

Deploying modern hardware MFA at scale
Organizational security is only effective when users adopt it. Distributing Yubico YubiKeys and onboarding users is simple and comes with expert guidance, enterprise subscriptions and global turnkey delivery services. A single Yubico YubiKey can be used right out-of-the-box across personal and work online accounts, and across 800+ IT systems and online services which makes it easier for the organization and the user to enhance protection for online accounts.

Yubico YubiKeys Features

  • Supported: Security: Two-factor, multi-factor and passwordless authentication
  • Supported: Authentication: Phishing defense using modern FIDO protocols that stops account takeovers
  • Supported: Multi-protocol capabilities: A single YubiKeys supports a range of authentication protocols such as FIDO2 (passkey)/WebAuthn, FIDO U2F, Smart card/PIV, OTP
  • Supported: Range of form factors: USB-A, USB-C, NFC enables stronger security across a range of legacy and devices
  • Supported: Supports legacy and modern environments: Secures legacy on-premises and modern cloud environments
  • Supported: Enterprise-ready: Hardware MFA available as a “YubiKeys as a Service” model to help deliver strong phishing-resistant MFA

Yubico YubiKeys Videos

Accelerating Zero Trust strategy with the YubiKey delivering strong, phishing-resistant MFA
The Bridge to Passwordless Authentication
Phishing-resistant MFA to meet new cyber insurance requirements

Yubico YubiKeys Technical Details

Deployment TypesOn-premise, Software as a Service (SaaS), Cloud, or Web-Based
Operating SystemsWindows, Linux, Mac
Mobile ApplicationApple iOS, Android

Frequently Asked Questions

Yubico YubiKeys make the internet safer with phishing-resistant multi-factor authentication (MFA) by providing simple and secure access to computers, mobile devices, servers, and internet accounts. The Yubico YubiKey stops account takeovers at scale by mitigating phishing and ransomware attacks, and delivers users authentication with a simple touch or tap.

Yubico YubiKeys starts at $3.94.

Reviewers rate Usability highest, with a score of 9.1.

The most common users of Yubico YubiKeys are from Mid-sized Companies (51-1,000 employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(137)

Attribute Ratings

Reviews

(1-25 of 41)
Companies can't remove reviews or game the system. Here's why
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We are putting the solution in the hands of tomorrow's security leaders, introducing the potential impact by enabling Strong MFA and passwordless authentication. After years of Yubico's demonstrated value to the large MNCs I've served, securing IaaS, PaaS, and SaaS at scale, the collaboration with the non-profit that I serve only makes sense.
  • Thoughtful Human Centered Design Approach - it's simple.
  • Advanced deployments are documented - service excellence.
  • Reliable, Accurate, and Consistent login experience.
  • Works as advertised and then some - little to improve from a technical perspective.
Personal life protecting your most sensitive accounts. Professional life, protecting all of your accounts. IAM deployments, either through the use of a local SSO, Federated IdP, or right on the appsec stack, have demonstrated extreme value. Yubikey works well at the front door and continuous authentication deployments.
Chad Byrd | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We currently use Yubico YubiKeys for our higher at risk users that have access to sensitive company information. For us it is an easy secure way for them to be secured and not worry about unauthorized access to sensitive data we need protected. It also assures that we reduce the risk as much as possible for risk of credential theft.

-we are now exploring the ways that YubiKeys can also be used for personal security of items and the different ways to implement the service and hardware to get the most benefit for our company and people.
  • Fast easy authentication to hardware and software
  • Easy for users to use
  • Easy to keep up with
  • We have had a couple of instances of issues with the key not working correctly intermittently
  • Some issues with users breaking keys as some models are slightly flimsy
  • Overall we are happy so I can’t think of anything else
For us high value targets that have sensitive access, it just makes sense to use Yubico YubiKeys. We feel comfortable with the solution and hardware. It’s super easy for everyone to use. They say the feel important having to use it like a spy sometimes. For our everyday user we have not deployed currently and are still trying to decide if it’s right for them due to the fact that we have many pieces of hardware lost with just their access entry NFC devices.

With the extra personal protection I tell everyone about it and how I am integrating this into my personal security as well.
Russell Licht | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Yubico Yubikeys are used for laptop authentication, password manager, 2FA, Google Domain 2FA, and Personal Encrypted Containers.
  • One-time use passwords
  • 2 Factor Authentication
  • Complex Password and device remembered
  • The Nano is still working after 12 years
  • After so long, full-sized Yubico YubiKeys are getting flaky and the button won't always work
Yubico YubiKeys are durable, lightweight, easy to use, support several authentication protocols, and have an enterprise management option.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Yubico YubiKeys have been deployed for login to all available applications, especially any SSO applications. We mandate some form of phishing-resistant MFA across the organization and Yubikeys have helped us reach our goal of making the environment and login secure for all our critical systems.
  • Easy deployment
  • Seamless to use
  • Great redundancy
  • Small format
  • Storage on Yubico YubiKeys
  • Password manager on Yubico YubiKeys
Yubico YubiKeys should be used across all business and personal applications. Yubico YubiKeys are a great way to keep access to enabled systems secure. Any online access that allows for Yubico YubiKeys should be enabled to be used with it so that in case of lost access or breach, physical YubiKey is the best way to recover.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Yubico YubiKeys are an essential part of our logins. When hired, every employee in my business unit receives a YubiKey 5c Nano along with their laptop. Since we are a hybrid workforce and many of us work from home, this allows us to log in with phishing-resistant MFA to all of our SaaS applications that are protected by Duo. Since WebAuthn is the standard from the start, this ensures that the highest level of protection is enforced from an authentication perspective. This has solved the issue of wondering whether or not users are logging in securely from disparate locations. It is also easy for users to authenticate with the tap of a finger to access critical applications - even in a Passwordless workflow!
  • Ease of use
  • Multiple authentication protocols
  • Cross-compatibility
  • Reduce the cost of keys
  • Honestly, Yubico YubiKeys are great and have all the features we need
  • No other criticisms - it just works!
Yubico YubiKeys are great for hybrid applications that support both modern and legacy authentication methods. For example, for web-based applications that are federated behind an IdP, the Yubico YubiKey WebAuthn (FIDO2) mechanism is the gold standard of phishing-resistant MFA. The same Yubico YubiKey (if a supported model) can also be used as an OTP hardware token so that the user does not have to use 2 different roaming authenticators for logging into all their applications. One YubiKey to rule them all!
June 04, 2024

Yubico Review

Score 10 out of 10
Vetted Review
Verified User
Incentivized
So we use the YubiKey for securing most of our cloud services, like Office 365, Microsoft 365 mainly, but also other things like password managers. And as far as the services will let us, we try to use mainly the Yubikeys for the physical security tokens and trying to use them for passwordless access to avoid the risks of password theft.
  • The setup is very easy. It's well documented and it's well supported with most services.
  • The backup situation is a hard problem to solve, but it needs to be resolved sooner or later because as it is now, if you have two Yubikeys, you have to enroll them both. When you lose one, you have to remember which one to deactivate and that's a hassle. Fortunately that doesn't happen very often. But having a backup Yubikey that you don't have to enroll everywhere but they can switch over to would be a dream.
I'd say it's very appropriate to secure your cloud access and also for login, it's less appropriate for local login. I'd say logging into Windows computers can be hard to do correctly. And on Mac computers, it's a no go as far as I can tell.
May 16, 2024

Yubico Review

Score 8 out of 10
Vetted Review
Verified User
Incentivized
When we access sensitive servers, there is always a need to have a 2-step verification process. So one step is always what you know, which is like a password. The second step is something that you have, which is the Yubico YubiKeys. So Yubico YubiKeys provides that 2-step authentication process without going through the hassle and it's also convenient because of the laptops that we have. I think it supports both Windows and Mac and I think we have both kinds of users and they both use it and it seems to work well.
  • It works all the time and it works well, so I think that's all I care about and it that's the work that it's supposed to do really well.
  • It can be about access control because either right now it's just you have access or you don't have access. I think there can be a use case where you are allowed a particular set of servers and not a particular set of servers. I think maybe it's there or we don't use it, but I haven't seen that. I think I've used Yubico YubiKeys at two companies and I haven't seen that. Maybe that's something that can be added.
It's well suited. I think the only issue is you need to have the key and if you lose it, then maybe there is a potential issue. I think those are the only concerns I have.
May 16, 2024

Yubico Review

Score 9 out of 10
Vetted Review
Verified User
Incentivized
There are various use cases that we use Yubico YubiKeys for. All of our authentication to the Fido server is through Yubico YubiKeys, and we also use it for the VPN right now. A lot of my teammates are using it for the Linux authentication tool, and we also store digital certificates, so we use it for PKI. So there are a lot of use cases that we use Yubico YubiKeys for.
  • I think the best thing is it has a lot of capacity and it's very, very secure. It can store a lot of private keys versus all the other products. We have reviewed a few other products, but Yubico YubiKeys gives a lot more capabilities than some of the other security key brands.
  • I think the only thing that I feel is the capability to store more keys on it, and it's a bit expensive compared to the other security manufacturers. So if we really have to sell it to our customers, they're not very comfortable paying for the high price, but then you're paying for more features.
We've been using this for one of our products where the requirement is AL3 where you can only use the web certified security gear and it offers the highest level of security and authentication. So I think the key that Yubico YubiKeys is providing is the best for that use case. For less appropriate, I think right now, I mean with pass keys, the sync pass keys becoming a thing. I don't know how for a consumer market you become a person would not want to keep a security key. It depends on the level of security that you're looking for. So for a consumer market for probably my social medias, I won't use a security key. I probably sync it to the cloud.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Primary use case is logging in that is authentication and we use for multiple products. One is logging into the machine. The other things we use is the based off of the roles and the responsibilities. We have various apps that require additional authentication after opening the laptop, the server, and that's where we use YubiKey and it's integrated with backend, author and off.
  • Primarily it's very convenient to use. Then also it assures when we open the machine, the authentication is on when we open the machines, which I refer to laptop, that's a very primary use case for us and that has been consistent along.
  • It requires a little bit of setup. I think that's where we had a little additional resources spent on it to integrate our current ortho dot with the YubiKey. When we bring in and the newer models, when we bring in, there's a little more maintenance that we need to do on and off every time. So that's something I request to look into to make it more easier.
Server authentications is where we don't see much of a use case. So far my primary role and also the use cases I have seen so far is using the laptop and authenticating the apps in the laptop. So those are the two major use cases I have seen. But this can be expanded to servers as well because I'm not in the infrastructure area, so I do not know whether you have it or not. But that's one thing I feel like you can look into expanding
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We use it for a second factor in authentication for logging into stuff.
  • It's very, very cost effective and is quite reliable.
  • I can't think of any. They're nice and small too. I kind of like that. I don't take up space on the laptop really.
I like to use it as another factor in authentication. I think it's really great that way. It's supported by industry standards, open standards.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
I can talk more about it in my personal capacity. So I use it to secure all of my own personal services, Google, social media, government, login services, basically anything that supports two FA and supports a hardware token, I'll use that over OTP, SMS, or anything is just simply the most secure solution I have found. I've always heard of people getting, "oh, my account's been hacked, my things, my account's being drained." I don't have this problem because I use hardware security module.
  • It's very easy to use. So I use the USBC and NFC one, so not only can I either insert it into a USB-C port, which the new iPhone 15 or iPad has, but you can also just tap it using NFC. So it's really easy across the broad range of devices to authenticate.
  • The only con is hardware based, so if it's in the other room you might have to get off the sofa to go get it. But aside from that, I mean I think that trade off is worth the security provides.
Anything where you value the security of access to data? Financial data, whether it's personal or professional, is highly useful because it provides us with that extra layer of physical security protection. If the data is something you're signing up for where you don't really care, it doesn't really matter at that point if it's a throwaway account on an internet site. But anything where security is important, definitely.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
We use it mostly for our MFA. It helps enforce MFA more easily without having to pick up my phone for an OTP.
  • Easy and lightweight, very quick to output needed keys.
  • Reliable and always functional.
  • It would be nice if it had an OTP feature.
  • The nano is nice but too easy to hit and accidentally send passcodes.
Yubikeys are good for MFA and ensuring specific access to some of our resources.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
We evaluated its use for employee authentication and conducted proof-of-concept with a small number of users. Most users preferred the current 2FA with the RSA key. However, Yubikey presents distribution challenges compared to a soft token that could be sent electronically to users. Also, we ran into challenges when end-users would lose their Yubikey, requiring a new key to be distributed and the old key revoked.
  • Highly secure storage of credentials.
  • Portability of credentials to any device.
  • Multi-factor, biometrics authentication.
  • Doesn't work with USB-C.
  • Improved mobile device support.
  • Cost point could be lower.
It is great for secure authentication for workers who physically come into the office and can pick up a physical key. Distribution is a significant challenge for remote workers; ideally, a soft token approach similar to competitors would be helpful to deal with this challenge. Also, escrow of keys so that credentials can move to a new key when the key is lost.
May 09, 2024

Great security key

Score 10 out of 10
Vetted Review
Verified User
Incentivized
Use my Yubico YubiKeys for 2FA during the login to enterprise SSO.
  • Reliable
  • Good size and compatibility
  • Not sure it is a Yubico YubiKeys problem, but mobile browsers do not always prompt for a PIN code, which is a bit scary
If a service supports security keys, I always enable it and enroll my Yubico YubiKeys. On the other hand, I prefer passkeys if they are supported and allowed, which is the case for our enterprise SSO. However, even in this case, I use Yubico YubiKeys for new platforms / browsers or as a backup.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
I've used a YubiKey 5 for several years for a 2nd factor authentication method to log into our VPN as well as adding it to many of my personal accounts. I've appreciated that it offers multiple authentication methods for different platforms both for work and personal accounts.
  • It makes logging in with a second factor very convenient
  • I like the small form factor making it easy to carry around
  • The different authentication profiles it provides makes it nice for personal and business use
  • It would be nice if the new biometric readers also offered all the same features as the older Yubico YubiKeys 5. Having everything in one.
It just works. I've been using the devices for several years and it just works. They are easy to add to multi accounts.
May 09, 2024

Yubi key.

Score 7 out of 10
Vetted Review
Verified User
Incentivized
Use it to authenticate to Okta and other security settings that require 2fa.
  • Easy to install.
  • Integrates well.
  • No OTP code support.
It is easy to set up. But when I need the OTP code, it is not available, and it is annoying to switch it off.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Yubico YubiKeys are used a secure form of MFA for our internal tools and also for my personal use. As a SaaS company, we also support the use of Yubico YubiKeys as a form of 2FA through either the OTP or WebAuthn protocols. We always recommend that our customers set up some form of 2FA, with the hardware keys being considered the most secure.
  • Quick to install
  • Reliable activation
  • Many options of form factors
  • Management software is confusing
  • Limited room for passkeys (25) at time of writing
It's great for security and ensuring that your accounts are essentially hack proof. One problem is traveling, if you leave your key in your hotel room or even back at home, you are pretty stuck. I would love to see a Yubico YubiKeys form factor that's designed to fit easily into wallets, such as a credit-card form factor.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We use YubiKeys for multi-factor authentication. Some organization still use same channels as password reset/ registration such as email to enable MFA, and the amount of breaches due to email compromise is high so having a device such as YubiKey would provide extra assurance on the strength of the Organizations security posture in terms of authentication
  • Key generation
  • Strong keys/ offline key storage
MFA
Score 10 out of 10
Vetted Review
Verified User
Incentivized
To authenticate to things like Okta, Entra ID in multiple regions, as well as OTP to OpenVPN both with yubicloud and greenradius
  • Simple and complex OTP
  • FIDO2 auth with major browsers
  • End user instruction/videos for HOW to use Yubico YubiKeys and what each function actually does.
Anywhere MFA is use Yubico YubiKeys are well suited, assuming the mechanism can handle it.
Less appropriate are really just legacy type systems that don’t even allow MFA implementation at all.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We use Yubico YubiKeys for MFA across multiple applications as our standard method of MFA for all users
  • Top tier MFA
  • Easy to implement
  • Secures accounts
  • FIDO standard
  • More robust 3rd party support
Well suited for any account that needs secured with MFA that supports it. Not well suited for homegrown applications
Antônio Mocelim | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We use Yubico YubiKeys to validate users and guarantee that they're who is using the credentials.
  • Simple to validade
  • Very strong
  • Compatible with note and mobile
  • Some kind of geo localization
  • Any kind of validation about the person
For me the best device to validate the right use of credentials, free of fishing
May 08, 2024

Yubico YubiKeys

Score 10 out of 10
Vetted Review
Verified User
Incentivized
I use Yubico YubiKeys to access corporate and private SaaS application. Different form-factors help to auth on laptop and mobile devices. Thanks.
  • Passwordless authentication
  • Secure auth
  • FIDO2 support
  • Extended integration with Identity Providers
  • Built-in functionality like Apple tags to simply find hardware keys
Very reliable. Variety of options. Great customer support
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Yubico YubiKeys has a fantastic solution for securing my logins to very important websites like email services, cloud providers and many others. I don't only use to improve the security on those services but use it for SSH logins to servers and GitHub. Over the years I have gathered multiple Yubico YubiKeys to make sure I always have one at hand. They have never let me down and are very reliable and even the USB one that I have for 10 years still works. I wouldn't be able to live without them thanks to the sense of protection they provide.
  • Securing logins to important services
  • SSH Protection
  • Github and Gitlab push protection
  • Initially getting my SSH keys working on it wasn't that easy, but thanks to some fantastic open-source tooling this now works very reliable
  • Get more websites to support it
I trust Yubico YubiKeys to keep my logins safe and protect me from compromise and lockout. Over the years I have made sure to gather multiple Yubico YubiKeys to have an extra fail safe.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Yubico YubiKeys are crucial to our operations for secure access. I recommend them to our customers on a regular basis.
  • Phishing resistant authentication
  • Strong auth without mobile phones
  • Nothing - I love Yubico YubiKeys!
Yubico YubiKeys are phenomenal for scenarios where phishing resistant authentication is needed; and especially for areas where mobile phones are not appropriate.
Return to navigation