Strong authentication. Easy to use. Low cost.
YubiKeyFIDO U2FSmart CardPGPOTPSmart CardOTP TokenPhoneTPMSecurityNew passcodes for every login, significantly stronger than static passwordsXXXXXXXX6-32 character one-time password, including time variant codeXPublic key crypto, hardened against phishing & man-in-the-middle attacksXXXXXNo cryptographic secrets stored or hosted by vendor*XXXXUser presence touch sensor, verifying that the user is human, not malwareXXXXXTransparency on server software, open for scrutinyXXXXHardware protection of keys in secure elementXXXXXXUsabilityFast “one-touch” authentication processXXXXXNo card reader neededXXXXXXXNo driver or client software neededXXXXOne device to any number of independent services, without federationXNo user identity required or shared, to preserve privacyXNo time synchronization issuesXXXXXXXPortable between all computer platformsXXXXWorks with NFC devices, excluding iOSXXXXWorks with iOS devices**XXNo batteriesXXXXXWaterproof and crush-resistantXXXXIntegrates seamlessly with computer, yet can still be removedXXXXNo need for extra hardware besides your computer and phoneXXAuthenticator fits nicely both on your keychain and in your walletXXXXWorks for users with limited visionXXXXXXXMultiple affordable backups, minimizes risk of being locked outXXXXXCostOffered with free, open-source servers and programming toolsXXXXMultiple authentication and cryptographic protocols on one deviceXXXXEasy for customer to program own secrets, at no or low costXXXXUsers can purchase their own authenticatorsXXXXXWeighs less than a credit card, ships with standard postageXXXXXEnd-user self-service provisioningXXLow-cost HSM for securing OTP secretsXMultiple backups minimizes recovery support costsXXXX
* No cryptographic secrets stored or hosted by vendor
Yubico offers an optional authentication service, YubiCloud, for hosting OTP secrets.
** Works with iOS devices
The YubiKey is often used in combination with a phone authenticator, or the computer with YubiKey bootstraps the phone (Gmail, LastPass, etc).
YubiKey for business, personal use, developers
The YubiKey is used by businesses to secure G Suite, Windows Login, Dropbox for Business, Salesforce.com, Open PGP encryption, password management, development platforms, and much more, plus the YubiHSM secures secrets on servers. Find out more about YubiKey for Business.
People use the YubiKey to secure their personal accounts on Google (Gmail, G Suite, YouTube, Blogger), Dropbox, GitHub, password managers, and many other applications that use two-factor authentication. Find out more about YubiKey for Personal Use.
Developers can integrate two-factor authentication in minutes using our free open source software. Find out more about YubiKey for Developers.
Find out more and compare YubiKeys.