Trust beyond transaction.
We are putting the solution in the hands of tomorrow's security leaders, introducing the potential impact by enabling Strong MFA and …
Starting at $3.94 per month per user
View Pricing Overview
What is Yubico YubiKeys?
Yubico YubiKeys make the internet safer with phishing-resistant multi-factor authentication (MFA) by providing simple and secure access to computers, mobile devices, servers, and internet accounts. The Yubico YubiKey stops account takeovers at scale by mitigating phishing and ransomware attacks, and…
Recent Reviews
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Reviewer Pros & Cons
Video Reviews
8 videos
Yubico YubiKey Review
05:09
Yubico YubiKey Review
06:57
Yubico YubiKey Review
04:58
Pricing
Entry-level set up fee?
- Setup fee optional
For the latest information on pricing, visithttps://www.yubico.com/yubienterprise…
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Starting price (does not include set up fee)
- $3.94 per month per user
Product Demos
Setting up the Security Key
YouTube
Product Details
- About
- Integrations
- Tech Details
- Downloadables
- FAQs
What is Yubico YubiKeys?
Yubico YubiKeys supports phishing-resistant multi-factor authentication (MFA) by providing simple and secure access to computers, mobile devices, servers, and internet accounts.
Stopping phishing attacks and account takeovers before they start
The Yubico YubiKey stops account takeovers at scale by mitigating phishing and ransomware attacks. And users experience fast and easy authentication with a simple touch or tap. For organizations that wish to secure sensitive data stored in servers, the YubiHSM offers an ultra-portable hardware security module, bringing great flexibility and affordability to any organization. For organizations that wish to secure sensitive data stored in servers, the YubiHSM offers a portable hardware security module, bringing great flexibility and affordability to any organization.
Stopping phishing attacks and account takeovers before they start
The Yubico YubiKey stops account takeovers at scale by mitigating phishing and ransomware attacks. And users experience fast and easy authentication with a simple touch or tap. For organizations that wish to secure sensitive data stored in servers, the YubiHSM offers an ultra-portable hardware security module, bringing great flexibility and affordability to any organization. For organizations that wish to secure sensitive data stored in servers, the YubiHSM offers a portable hardware security module, bringing great flexibility and affordability to any organization.
Deploying modern hardware MFA at scale
Organizational security is only effective when users adopt it. Distributing Yubico YubiKeys and onboarding users is simple and comes with expert guidance, enterprise subscriptions and global turnkey delivery services. A single Yubico YubiKey can be used right out-of-the-box across personal and work online accounts, and across 800+ IT systems and online services which makes it easier for the organization and the user to enhance protection for online accounts.
Yubico YubiKeys Features
- Supported: Security: Two-factor, multi-factor and passwordless authentication
- Supported: Authentication: Phishing defense using modern FIDO protocols that stops account takeovers
- Supported: Multi-protocol capabilities: A single YubiKeys supports a range of authentication protocols such as FIDO2 (passkey)/WebAuthn, FIDO U2F, Smart card/PIV, OTP
- Supported: Range of form factors: USB-A, USB-C, NFC enables stronger security across a range of legacy and devices
- Supported: Supports legacy and modern environments: Secures legacy on-premises and modern cloud environments
- Supported: Enterprise-ready: Hardware MFA available as a “YubiKeys as a Service” model to help deliver strong phishing-resistant MFA
Yubico YubiKeys Videos
Accelerating Zero Trust strategy with the YubiKey delivering strong, phishing-resistant MFA
The Bridge to Passwordless Authentication
Phishing-resistant MFA to meet new cyber insurance requirements
Yubico YubiKeys Integrations
- AWS Identity & Access Management
- Cloudflare
- Apple iCloud
- Salesforce Sales Cloud
- 1Password
- LastPass for Business
- Cisco Duo
- Binance
- Okta
- Bitwarden
- DocuSign
- GitHub
- Dropbox Business
- Citrix Workspace (discontinued)
- ID.me
- Keeper
- PingOne from Ping Identity
- OneLogin by One Identity
- SecurID
- TeamViewer
- GitLab
- HashiCorp Vault
- Jamf Connect
- BeyondTrust Remote Support
- Drupal
- CyberArk Workforce Identity
- Identity Automation RapidIdentity
- Joomla!
- KeePass
- One Identity Identity Manager
- Porkbun
Yubico YubiKeys Technical Details
| Deployment Types | On-premise, Software as a Service (SaaS), Cloud, or Web-Based |
|---|---|
| Operating Systems | Windows, Linux, Mac |
| Mobile Application | Apple iOS, Android |
Yubico YubiKeys Downloadables
Frequently Asked Questions
Yubico YubiKeys make the internet safer with phishing-resistant multi-factor authentication (MFA) by providing simple and secure access to computers, mobile devices, servers, and internet accounts. The Yubico YubiKey stops account takeovers at scale by mitigating phishing and ransomware attacks, and delivers users authentication with a simple touch or tap.
Yubico YubiKeys starts at $3.94.
Reviewers rate Usability highest, with a score of 9.1.
The most common users of Yubico YubiKeys are from Small Businesses (1-50 employees).
Comparisons
Compare with
Reviews and Ratings
(137)Attribute Ratings
Reviews
(1-5 of 5)Companies can't remove reviews or game the system. Here's why
We currently use Yubico YubiKeys for our higher at risk users that have access to sensitive company information. For us it is an easy secure way for them to be secured and not worry about unauthorized access to sensitive data we need protected. It also assures that we reduce the risk as much as possible for risk of credential theft.
-we are now exploring the ways that YubiKeys can also be used for personal security of items and the different ways to implement the service and hardware to get the most benefit for our company and people.
-we are now exploring the ways that YubiKeys can also be used for personal security of items and the different ways to implement the service and hardware to get the most benefit for our company and people.
- Fast easy authentication to hardware and software
- Easy for users to use
- Easy to keep up with
- We have had a couple of instances of issues with the key not working correctly intermittently
- Some issues with users breaking keys as some models are slightly flimsy
- Overall we are happy so I can’t think of anything else
- Easy to set up
- Overall great hardware
- Small form factor
- Many different options for hardware style
- Defiantly a reduction in password resets for some higher level users that we had issues with in the past
- Feeling secure in the knowledge that our data is secure with using Yubico YubiKeys
- Easy to integrate and use with our windows products
The impact is is very large for us with the use of Yubico YubiKeys and we feel safe and secure knowing the users have this secure device and having to have it on hand to gain access to resources. We sleep better at night knowing that phishing and ransomware risk is greatly reduced for our high risk users and the service has been reliable.
Our users love the Yubico YubiKeys specifically for how small and un-intrusive the device is to carry. They feel more secure with less risk of someone getting their credentials and causing harm to the company. Technical users and implementers feel confident in the security and have less to worry about with it lowering our surface area of risk.
We have thought about just trying another competitor for due diligence but have not explored that option yet. We went with Yubico YubiKey due to hearing about it at a conference and decided to start experimenting with the solution. We are pretty decided on what we are going with for a rollout but will explore another just to show that we had options. We will not put the effort into full experimentation of the product but more of just a side by side comparison on controls, ease of implementation and reviews.
10
So we are just now rolling out YubiKeys in our organization. Currently just the high level personnel and high level access people with sensitive access to data. So our C levels and IT people have been rolled out first for testing and working out an issues along the way we may run into in the wild between the different applications we have before we offer this company wide.
6
So there are 7 of us total, we have 4 desktop support and 3 Engineers that if needed for escalation past what desktop can do. As far as skills go, the main thing with support is just adjusting the user to how it works and setup for first time use. Rarely once configured is there anything that we have to do unless replacing a damaged/lost item.
- be as phish proof as possible with our applications
- remove credential theft as a worry in our system
- moving towards a password less organization
- I was told they feel cool and like a spy having to carry one of these
- using the multi device authentication for the new Iphones
- people have even used the same yubikey for their homes and devices
- looking at some of the blockchain ideas to secure wallets
- thinking about implementing the secure print for our HR and accounting depts.
- We are looking into the encryption and signing of emails for sensitive documents
- looking at the physical access options for entry to buildings and rooms
- I am exploring adding this as a key to get into our VPN for the company
- as we migrate to GitHub our software devs are exploring a requirement for the code repositories
No
- Cloud Solutions
- Scalability
- Integration with Other Systems
- Ease of Use
The number one factor for us is going to be the Ease of Use. For us we need something that is not complicated to use or implement. There are so many other things that are complicated within our networks and having this as a set and forget type device for access control is very helpful to everyone.
No, Yubikey is well known and when it comes to dependability and good reputation is more important than anyone offering a better price. With a well known company there are more likely more integrations of use. In my experience companies tend to developed integrations/connections/compatibility first for well known and highly used companies that are stable.
- Implemented in-house
No
Change management was minimal
Our team is maybe a little weird since we are so small there wasn't a lot of change management due to being able to learn and test this in our small inhouse group then releasing it to our test user group. Being as small as we are some of our change management is just saying hey I'm doing this thing. Works for us but maybe bigger teams not so much and would be more important to implement.
- learning to keep your personal token with you at all times
- Learning the steps to implement this with our different products, as the process isn't the same between products
- the need for 2 physical token, and different form factors finding the right one between the different interfaces
- No Training
For many I would suggest training, since I am and IT professional I can figure things out very quickly and have an idea how it works. For our end users I would have to either train them from my documentation of instructions or find some type of online source for their training and questions they may have.
We have not developed any yet but that will come as we plan the final phase for roll out to our users in mass. That has not become a subject yet as we are still in testing phase for the next few months. Once we are past that then we will get together as an implementation team and sort that out before we begin. We will rely on guidance from Yubico best practices to outline how best it will work for us.
No - we have not done any customization to the interface
No - we have not done any custom code
We have not done any different or additional configuration or customization at this point. We do have hopes for our software team to integrate this within our custom software that we have built to make things more secure on our in house products. Once they get to a point where they can start working on integrating Yubico into our systems that will be a whole other project.
We are still experimenting at this point and dogfooding this within certain users until we decide to roll out in mass. When we do roll out we do like to have the comfort of a support team behind us for when we need it and to be able to access it immediately to quickly resolve any issues. So when we do go company wide support will be be important to us.
No
So what really got us started with exploring this was going to the RSA conference and talking with the reps there and what all the YubiKey can support and how they are adding more and more things that it can be used for we opened up exploring this option more and more. Last year we played with a few, but with how the landscape is looking with threats we are wanting to find the most secure way to access our resources and not have to worry about credential theft as much. I would say the Reps at RSA were very knowledgeable and gave us lots of detail and insight to want to explore more.
- The 2FA is a breeze for us and very usefull
- Going password less for our systems was very fast and easy
- using the FIDO2 protocols on some of our systems was easy
- integrating into our LastPass environment was a breeze and gives us reassurance we are protecting a very critical resource.
- I would say compatibility issues in which waiting on certain platforms to integrate is a difficult sell to management who want a single uniform way to authenticate.
- Having to have multiple keys as a backup per person, Not sure of a good solution but having to keep up with 2 keys for the just in case loss or damage of a key is cumbersome.
- The different form factors of I haven't done any firmware updates as of yet as I am a little on the it's not broken so why fix it, and risk breaking it. Having usb-c to usb-a within different devices but again that is kind of a cumbersome on having to use adapters at times for users.
- I have not yet done firmware updates for my key or anyone else, I am an it's not broken so why fix it mentality with it due to if something were to go wrong I am not wanting to replace it. I have not personally gotten a second key yet but I should.
Yes
I have used this with my iPhone a few times with iPhone via USB-C and also the NFC on certain apps but I have only began to explore this option recently. I have it set for my LastPass on iphone, Google drive and account, and for my personal coinbase account.
- Custom software written in house
- we have a custom application that our software team has designed we are exploring authentication types to build and integrate with on our roadmap
We are exploring authentication types with our custom software that runs our company and this would definitely be a type of authentication I would prefer for high security. I have added this as a suggestion to the software team as we move into 2FA/MFA/Password less exploration for our application and integration.
- API (e.g. SOAP or REST)
I don't know that I have any advice besides deciding on what you need an integration for and how you would like the integration to work. Our software team is good at seeking consultation and support from companies they are writing to integrate with. The only advice would be to feel out how well they work with you for support and creating customizations. Their team so far had been excellent at answering questions and how best to frame the project.
Once we go into talks the main thing is going to be determining the supply of product and licenses we will need and negotiate based on an initial estimate. We generally will only start off with a year of support as we go into anything new as skeptics and after the year decide to go multiyear support once we have determined how and the best way for us to be supported.
In the past dealing with our vendors having a good relationship with the vendor and your sales rep is key. He is an advocate for us and that comes with years of working together. We are straight forward and will ask and tell what we need and the level of support we are expecting. It's always nice to have a vendor and same sales rep to go to but when eventually you get assigned to another person we try to establish the same relationship and trust by being upfront of what we expect and what works for our company.
No
- the feeling of security on sensitive products
- not having to remember all different passwords
- the hope of pushing the company to a zero trust environment
- I would like to see a physical key with storage built in and integrated with they key somehow. I have to carry a key plus my flashdrive of tools on my keychain and makes it kinda bulky.
Yes
Once we get through our period of exploration and take this to our directors to approve a company wide roll out we will be exploring which plan would benefit us whether it be Professional or Enterprise version. But once we have the green light we will roll out a full version of sorts and have a support team to back us up for any issues along the way.
No
June 04, 2024
Yubico YubiKeys: Lightweight, Durable, Easy to Use
Yubico Yubikeys are used for laptop authentication, password manager, 2FA, Google Domain 2FA, and Personal Encrypted Containers.
- One-time use passwords
- 2 Factor Authentication
- Complex Password and device remembered
- The Nano is still working after 12 years
- After so long, full-sized Yubico YubiKeys are getting flaky and the button won't always work
- Simple and easy to carry
- Enterprise management features
- Durable and long-lasting
- Bought once, back in 2011 or 2012 and still using the device.
- Works with whatever device or service I needed it to.
It's used mostly for 2FA together with LastPass to encourage employees to use stronger passwords.
As soon as our corporate use of Google for Business began requiring MFA, employees were using their own money or office budgets to buy Yubico Yubikeys.
Much less annoying to work with than the authenticator app on smartphones that requires retyping 6 digits.
30
IT and finance.
We don't do corporate management. Each person is responsible for their own YubiKey. Most of us purchased them as individuals.
- Access to a password management app
- Google sign in
- Various apps the support YubiKeys
- Combining a very long passcode from a YubiKey with a password to merge "something you have" with "something you know."
- Managed access solution for individuals with very specialized access privileges to financial systems.
Yes
Fingerprint reader.
TOTP key fob with LCD screen (can't remember product name.)
TOTP key fob with LCD screen (can't remember product name.)
- Scalability
- Ease of Use
It's easy to use and easy to deploy in an enterprise environment. It can be combined with other OTP or MFA protocols in cloud systems.
Get the corporate VP of operations on board with the purchasing decision.
- Don't know
Yes
Each individual on their own pace.
Change management was minimal
- Corporate IT did not buy in, so individuals proceeded on their own through word-of-mouth, internal marketing.
- One-touch or long-touch to generate two different kinds of passcodes
- Inserting into a USB-A device into a USB port after USB-C became the new laptop standard.
Yes, but I don't use it
June 04, 2024
Fast and Secure Way to MFA - and Password-less, Too!
Yubico YubiKeys are an essential part of our logins. When hired, every employee in my business unit receives a YubiKey 5c Nano along with their laptop. Since we are a hybrid workforce and many of us work from home, this allows us to log in with phishing-resistant MFA to all of our SaaS applications that are protected by Duo. Since WebAuthn is the standard from the start, this ensures that the highest level of protection is enforced from an authentication perspective. This has solved the issue of wondering whether or not users are logging in securely from disparate locations. It is also easy for users to authenticate with the tap of a finger to access critical applications - even in a Passwordless workflow!
- Ease of use
- Multiple authentication protocols
- Cross-compatibility
- Reduce the cost of keys
- Honestly, Yubico YubiKeys are great and have all the features we need
- No other criticisms - it just works!
- Multiple authentication methods supported (FIDO2 + AES/OTP)
- Ease of use
- Provisioning/user onboarding
- Reducing breaches (phishing-resistant MFA)
- Passwordless (quicker, easier, safer logins)
- End user self-enrollment (no administrative setup for WebAuthn)
It has greatly reduced the likelihood of successful phishing attacks, makes MFA easier for end users (better experience equals users will comply with security controls), and helps secure applications by providing out-of-the-box compatibility with modern web browsers. Our overall risk exposure and attack surface have diminished to allow secure authentications from anywhere in the world.
Whether it is WebAuthn or OTP, Yubico YubiKeys allows a single tap of a button to use MFA. With WebAuthn, this has changed the game as we also have a Passwordless authentication workflow and, with the use of FIDO2-compliant YubiKeys, makes the fastest and most secure login experience possible for our users.
Duo and Yubico YubiKeys actually work very well together. We have chosen to use these two products together to make safe and secure MFA (including Passwordless) available to all users. The ease of use that Duo allows for both OTP import and WebAuthn enrollment makes it possible for modern and legacy applications to be protected by Duo MFA via Yubico YubiKeys as the second factor.
1200
Multiple! Each team member supports our flagship product and is shipped a YubiKey during onboarding. These folks make up the following functions: Engineering, Marketing, Customer Support, Product Management, Sales, and many more. Although we are moving to a Passwordless login experience using Platform Authenticators, YubiKeys are essential to how we do business and protect our applications.
10
These folks make up our in-house technical support team. Although many other engineering and customer success personnel can manage their own YubiKeys and assist with other's keys, our dedicated support team is available to help with troubleshooting issues that arise by way of ongoing issues/maintenance. We are happy to have them support us!
- Secure access into applications
- MFA
- Passwordless
- Using multiple protocols on keys (FIDO2, U2F, OTP, etc.)
- Device registration via PIN
- Export token slot details
- Secure enclave
- Roaming Passkeys
- Enterprise Attestation
June 04, 2024
Yubico Review
So we use the YubiKey for securing most of our cloud services, like Office 365, Microsoft 365 mainly, but also other things like password managers. And as far as the services will let us, we try to use mainly the Yubikeys for the physical security tokens and trying to use them for passwordless access to avoid the risks of password theft.
- The setup is very easy. It's well documented and it's well supported with most services.
- The backup situation is a hard problem to solve, but it needs to be resolved sooner or later because as it is now, if you have two Yubikeys, you have to enroll them both. When you lose one, you have to remember which one to deactivate and that's a hassle. Fortunately that doesn't happen very often. But having a backup Yubikey that you don't have to enroll everywhere but they can switch over to would be a dream.
- Ease of use
- Hardware security
- I'd say it's enhanced our security and it's very easy to get the users to use them. It's very, at least easy to teach them how to use them.
I'd say it's enhanced our security because we are moving towards a two factor and passwordless situation with the limited resources we have in our organization. So it's a good fit.
It's been mostly problem-free compared to other solutions like two-factor authentication apps like Authenticator apps, it's much easier to get them to use it, just plug it in and go ahead. So I'd say it's pretty convenient.
If you compare it to authenticator apps, I'd say it's much more easy to set this up for the individual user. Well, it's Swedish. It's also very well documented. There are a lot of guides on how to use them and I have a lot of faith in the security posture of Yubico and how the keys are developed and general security of the solution.
8
All functions
1
Understanding of the different authentication protocols and how different software and services use them
- Microsoft 365 authentication
- Password manager 2FA
- Door access
- Not sure
No
- Cloud Solutions
- Integration with Other Systems
- Ease of Use
- Other
Very secure authentication with hardware based security.
Evaluate different vendor and models
No, not needed. We don't use custom integrations.
No
June 04, 2024
Yubico YubiKeys Works!
We use it for our MFA with OKTA
- Quick
- Easy to set up
- Small profile
- My USB-a nano broke pretty easily
- Lower profile USBc
- Secure
- Small
- Easy to deploy
- It meets our infosec requirements for mfa and security
Secure MFA has been achieved and eliminated passwords.
It has been well received and used easily.
We used authenticator apps which aren't as quick.
15000
Yubikeys are provided by our InfoSec and IT teams for all employees as an MFA option. This represents all business functions that use the internal network resources.
30
Out internal IT and Infosec teams are setup and equipped to support our use of Yubikeys
- MFA
- Secure authentication
- Passwordless
- Using for internal app authentication
- Using for authentication in our partner external apps
- Using for local machine authentication
- One touch voting in Zoom
- Docusign