Pros and Cons of Yubico YubiKeys 2024 (2024)

Overview

What is Yubico YubiKeys?

Yubico YubiKeys make the internet safer with phishing-resistant multi-factor authentication (MFA) by providing simple and secure access to computers, mobile devices, servers, and internet accounts. The Yubico YubiKey stops account takeovers at scale by mitigating phishing and ransomware attacks, and…

Read more

Recent Reviews

Read all reviews

Reviewer Pros & Cons

View all pros & cons
Return to navigation

Pricing

View all pricing

Entry-level set up fee?

  • Setup fee optional

For the latest information on pricing, visithttps://www.yubico.com/yubienterprise…

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services

Starting price (does not include set up fee)

  • $3.94 per month per user
Return to navigation

Product Demos

Setting up the Security Key

YouTube

Return to navigation

Product Details

  • About
  • Integrations
  • Tech Details
  • Downloadables
  • FAQs

What is Yubico YubiKeys?

Yubico YubiKeys supports phishing-resistant multi-factor authentication (MFA) by providing simple and secure access to computers, mobile devices, servers, and internet accounts.

Stopping phishing attacks and account takeovers before they start
The Yubico YubiKey stops account takeovers at scale by mitigating phishing and ransomware attacks. And users experience fast and easy authentication with a simple touch or tap. For organizations that wish to secure sensitive data stored in servers, the YubiHSM offers an ultra-portable hardware security module, bringing great flexibility and affordability to any organization. For organizations that wish to secure sensitive data stored in servers, the YubiHSM offers a portable hardware security module, bringing great flexibility and affordability to any organization.

Deploying modern hardware MFA at scale

Organizational security is only effective when users adopt it. Distributing Yubico YubiKeys and onboarding users is simple and comes with expert guidance, enterprise subscriptions and global turnkey delivery services. A single Yubico YubiKey can be used right out-of-the-box across personal and work online accounts, and across 800+ IT systems and online services which makes it easier for the organization and the user to enhance protection for online accounts.

Yubico YubiKeys Features

  • Supported: Security: Two-factor, multi-factor and passwordless authentication
  • Supported: Authentication: Phishing defense using modern FIDO protocols that stops account takeovers
  • Supported: Multi-protocol capabilities: A single YubiKeys supports a range of authentication protocols such as FIDO2 (passkey)/WebAuthn, FIDO U2F, Smart card/PIV, OTP
  • Supported: Range of form factors: USB-A, USB-C, NFC enables stronger security across a range of legacy and devices
  • Supported: Supports legacy and modern environments: Secures legacy on-premises and modern cloud environments
  • Supported: Enterprise-ready: Hardware MFA available as a “YubiKeys as a Service” model to help deliver strong phishing-resistant MFA

Yubico YubiKeys Videos

Accelerating Zero Trust strategy with the YubiKey delivering strong, phishing-resistant MFA

The Bridge to Passwordless Authentication

Phishing-resistant MFA to meet new cyber insurance requirements

Yubico YubiKeys Technical Details

Deployment TypesOn-premise, Software as a Service (SaaS), Cloud, or Web-Based
Operating SystemsWindows, Linux, Mac
Mobile ApplicationApple iOS, Android

Frequently Asked Questions

Yubico YubiKeys make the internet safer with phishing-resistant multi-factor authentication (MFA) by providing simple and secure access to computers, mobile devices, servers, and internet accounts. The Yubico YubiKey stops account takeovers at scale by mitigating phishing and ransomware attacks, and delivers users authentication with a simple touch or tap.

Yubico YubiKeys starts at $3.94.

The most common users of Yubico YubiKeys are from Small Businesses (1-50 employees).

Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(62)

Attribute Ratings

Reviews

(1-25 of 34)

Companies can't remove reviews or game the system. Here's why

May 01, 2024

YubiKeys at an MSP

Pros and Cons of Yubico YubiKeys 2024 (11)

President

Layer3 Managed Services (Computer & Network Security, 1-10 employees)

Score

10 out of 10

Vetted Review

Reseller

Incentivized

  • Phishing resistant MFA

  • Ease of use, particularly with types of devices available

  • Availability of FIPS encrypted devices for GovCloud environments

  • The YubiKey management apps could be easier to use

February 16, 2024

Yubico YubiKeys Review

Verified User

Director in Information Technology

Electrical & Electronic Manufacturing Company, 10,001+ employees

Score

5 out of 10

Vetted Review

Verified User

Incentivized

  • Ensure we extend the security to cover physical (what you have).

  • Ties into many third party OATH solutions out of the box.

  • Provides robust defense against man in the middle attacks by ensuring our encryption layers are secure.

  • Key recovery with the onboard chip requires a third party toolkit.

Pros and Cons of Yubico YubiKeys 2024 (12)

CTO

Donuts Inc. (Internet, 51-200 employees)

Score

9 out of 10

Vetted Review

Verified User

Incentivized

  • Provides additional factors for authenticating against critical systems.

  • Significantly reduces the chance of a successful phishing attempt.

  • Can function as your primary credential for passwordless authentication.

  • Extremely durable - I've had the same Yubikeys in use for years.

  • Cross-platform - can be used on all mainstream operating systems and mobile devices.

  • Yubikeys can get lost so you will need to plan for recovery.

  • Biometric Yubikeys can be finicky so you may need a backup authentication option.

  • Yubikeys can be shared or given to someone else.

  • If you use them for time-based authentication, they store a limited number of codes.

February 02, 2024

Yubico YubiKeys Review

Pros and Cons of Yubico YubiKeys 2024 (13)

CIO

Polished Geek (Information Technology & Services, 11-50 employees)

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • The easy mental model for employees to understand, "Protect it like a physical key to the office"

  • Super durable

  • The security series makes it affordable for every small company

  • Easy to use

  • Yubico YubiKeys resident keys (aka passkeys) have a crazy low limit (25).

  • Yubico YubiKeys' Bios need a slightly increased lock-out limit - Increase from 3 to 5, please.

  • Yubico YubiKeys' Bios is too expensive, and lacking in basic features. It is missing features even the security key series has but costs 4x as much. Comparing it to a series of 5 features is even worse.

  • Yubico YubiKeys' Bios needs NFC. Not sure how this would work with the power limits of NFC but it needs it. I've plugged my bio into a large variety of phones and on most, it fails to work.

February 02, 2024

MFA on Your Keyring

Verified User

Engineer in Information Technology

Mechanical Or Industrial Engineering Company, 51-200 employees

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • MFA

  • Small device

  • Good price

  • I would like to have my fingerprint unlocked. This would make the device good for two factors in one device.

Information Technology Specialist 60

Office of Financial Research (Financial Services, 501-1000 employees)

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • Certificate-based authentication, in PIV/CAC smart card role

  • FIDO2 device, used with 3rd party systems which are difficult to implement cert-based authentication on

  • Reliable, long-lasting hardware token, with no batteries to replace, perpetual licensing, and simple management.

  • Looking forward to pre-provisioning, especially with Okta

  • Some type of centralized management system, some way to automate inventory management and tracking, at least at the moment of deployment

Verified User

Director in Professional Services

Computer Networking Company, 11-50 employees

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • Works great as a smart card for logging on to Windows

  • Works great as a Security Key for secure logon to Microsoft 365

  • Practically indestructible

  • They need a few more designs on their Yubistyle Skinz to allow for more personalization

  • Honestly, I can't think of any other issues I've seen

February 02, 2024

Love Yubico YubiKeys!

Verified User

C-Level Executive in Information Technology

Hospitality Company, 201-500 employees

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • Phishing resistance

  • Easy passwordless

  • Cross-platform passkeys

  • Get more platforms to support it

  • Better NFC compatibility

  • Cheaper

Pros and Cons of Yubico YubiKeys 2024 (14)

Senior Operations Engineer

Cru (Non-profit Organization Management, 5001-10,000 employees)

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • One-time use passwords

  • 2 Factor Authentication

  • Complex Password and device remembered

  • The Nano is still working after 12 years

  • After so long, full-sized Yubico YubiKeys are getting flaky and the button won't always work

Verified User

C-Level Executive in Corporate

Hospitality Company, 11-50 employees

Score

9 out of 10

Vetted Review

Verified User

Incentivized

  • Sturdy and reliable - even though the key is jumbled in my pocket for years, it works every time.

  • Super secure - it's the safest way I know to prevent hacking

  • Super easy to use. Once it's set up, I just press my finger print on it, and I'm in!

  • A better way to validate a back-up, in the event I lose the device

  • a near field blue-tooth could be a nice addition (without compromising security)

  • Smaller connector make it compatible with USB-C

January 25, 2024

Good Value

Verified User

Engineer in Information Technology

Computer & Network Security Company, 10,001+ employees

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • OTP

  • FIDO/FIDO2

  • PKI Certificates

  • Stickers should be free and come with the YubiKeys

  • Different colors

President

Trulock Enterprises (Computer & Network Security, 1-10 employees)

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • Reliable security.

  • Low profile and easy to carry.

  • Responsive and accurate.

  • As many interfaces have transitioned from USB-A to USB-C, would be great to have a trade-in program for old keys.

  • Add additional color choices.

  • Custom branding for corporate logo.

Pros and Cons of Yubico YubiKeys 2024 (15)

Chief Executive Manager

Royal Diadem Jewelers (Retail, 1-10 employees)

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • complex execution made VERY EASY

  • significant long passwords for security

  • Durable,.. can be carried and used without damaging multiple opportunities when very busy, keeping secure with quick service

  • help us use non contack option to be read by a P.O.S system

  • make the key slightly longer (easier to handle)

January 24, 2024

Yubico YubiKeys Review

Verified User

Engineer in Information Technology

Hospital & Health Care Company, 201-500 employees

Score

9 out of 10

Vetted Review

Verified User

Incentivized

  • Easy to use

  • High Security Posture

  • Very small

  • Would like to see ova server back in place

  • Make a key that works with door access

  • continue improving their device

Verified User

Professional in Corporate

Medical Practice Company, 1-10 employees

Score

9 out of 10

Vetted Review

Verified User

Incentivized

  • Handy, and portable

  • Fully encrypted

  • Reasonable price point, especially for bulk purchasing

  • Set up can be confusing

  • Upgrades make previous versions feature obsolete

  • Cost

Verified User

General Manager in Corporate

Translation & Localization Company, 11-50 employees

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • Reliable implementation.

  • Quality material and units.

  • Solid security choice.

  • Difficult to use due to angles sometimes.

  • Future unit may also include data.

  • Larger footprint for fingerprint.

January 17, 2024

These Are the BEST

Verified User

Technician in Other

Computer & Network Security Company, 1-10 employees

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • Secure

  • Doesn't fail

  • Easy to use

  • They

  • Are

  • Perfect

Verified User

C-Level Executive in Information Technology

Banking Company, 51-200 employees

Score

9 out of 10

Vetted Review

Verified User

Incentivized

  • Consistent delivery of 2FA keys

  • Durable as all heck

  • Easy configuration with matching software provider

  • Works just fine with Windows built in 2FA if needed

  • Could user a better management application

  • Mindriver is a bit of a pain if you need it

Verified User

Strategist in Information Technology

Higher Education Company, 1001-5000 employees

Score

9 out of 10

Vetted Review

Verified User

Incentivized

  • Phishing Resistant

  • Efficient MFA

  • Ease of Use

  • Syncing keys with IDP is not efficient

  • Plug N Play would be nice to make it more efficient for management of keys

Verified User

Director in Information Technology

Packaging & Containers Company, 10,001+ employees

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • Passkey usage

  • MFA

  • Password Management

  • Personal MFA

  • Integration with Windows Hello

  • Mobile device integration with Office 365

November 20, 2023

Trust beyond transaction.

DFW Board Chair

NextGen Cyber Talent (Non-profit Organization Management, 11-50 employees)

Score

10 out of 10

Vetted Review

Verified User

Incentivized

  • Thoughtful Human Centered Design Approach - it's simple.

  • Advanced deployments are documented - service excellence.

  • Reliable, Accurate, and Consistent login experience.

  • Works as advertised and then some - little to improve from a technical perspective.

Return to navigation
Pros and Cons of Yubico YubiKeys 2024 (2024)

FAQs

What are the downsides of YubiKey? ›

Loss or Damage: Misplacing or damaging YubiKey can lead to losing access to online accounts. Time-consuming Recovery: Restoring access to accounts in case of YubiKey loss or damage can be time-consuming. Risk of Loss or Theft: Due to its small physical size, losing or having YubiKey stolen can pose a security risk.

How many YubiKeys do I need? ›

A: Many of our customers actually purchase several spares for maximum security and peace of mind. This is not a bad idea when guarding extremely critical accounts. Starting off, you should be fine with 1-2 spare keys.

Why use YubiKey instead of the authenticator app? ›

The YubiKey advantage

Storing your credentials on a hardware key is safer than storing them on a mobile phone. Your credential stays safe in the secure element of the YubiKey and cannot be extracted.

Can you use YubiKey for everything? ›

How it works. A single YubiKey has multiple functions for securing your login to email, online services, apps, computers, and even physical spaces. Use any YubiKey feature, or use them all.

Can a YubiKey be hacked? ›

While YubiKey is designed to be secure, it is not immune to attacks. There have been instances where YubiKeys have been hacked or compromised. Common attack vectors on hardware keys include physical attacks, side-channel attacks, and firmware vulnerabilities.

What is the lifespan of a YubiKey? ›

However, considering a YubiKey being used five times a day, 365 days per year, it will take 18 years for the counter to get stuck. Furthermore, as this counter only increment the first time after power up / reset, the practical lifetime is even longer.

Should I leave my YubiKey plugged in all the time? ›

If it's your first time using a YubiKey and you're used to Touch ID, we suggest using the Nano key and leaving it plugged in. If you're working from home, you can leave it plugged in.

What if someone steals my YubiKey? ›

So, what happens if you lose your YubiKey? In that case, you can still use your Authenticator app (phew!). While you can't create a backup YubiKey, you can always contact Yubico to get a replacement key.

Can I use YubiKey for all my passwords? ›

The YubiKey works with Password Safe to protect your passwords using two-factor authentication (2FA). Both a master password and a YubiKey are needed to enable access to your Password Safe file, which contains the usernames, websites, passwords and other information for all of your online accounts.

What should I use my YubiKey for? ›

A single YubiKey has multiple functions for securing your login to email, online services, apps, computers, and even physical spaces.
  • The Key to Trust. The highest level of phishing defense, yet easy to use, the YubiKey is your. ...
  • Purpose built for security. ...
  • Multi-factor authentication.

Is YubiKey a good idea? ›

Premium features, premium price. The Yubico YubiKey 5C NFC supports many authentication protocols, so it works anywhere security keys are accepted. If you can make the most of its advanced features, such as signing and encrypting with OpenPGP, it's well worth the price.

Is a YubiKey worth it? ›

Its robust security features, versatility, and compatibility with a wide range of services make it a worthwhile addition to your digital security arsenal. With the rising threat of cyberattacks and identity theft, the YubiKey provides a simple yet powerful solution to protect your online presence.

Why is YubiKey so expensive? ›

It is costly to design, mould, manufacture, sell and support a hardware product, even something as small as this. Since you don't want your 2FA company to go out of business there is good value in knowing they have a stable business model that can actually support a company rather than just burning capital.

Does YubiKey work without internet? ›

Unlike SMS codes and mobile push authentication, YubiKeys do not require a cellular connection to operate. In fact, they don't even require batteries or have any other external dependency. Simply plug the key into a USB port on your device and touch to authenticate.

Which YubiKey is most secure? ›

The YubiKey 5 FIPS certified security keys meet the highest level of assurance (AAL3) of the new NIST SP800-63B guidelines.

What are the disadvantages of security key? ›

Hardware Security Key Cons

If you have multiple users of a single account, sharing a key can be a bit impractical. Just like with your smartphone, if you lose your security key, it can make accessing your accounts difficult unless you've set alternative access options as a backup.

Can YubiKey get malware? ›

Yubico's YubiKey is built on a foundation of strong authentication. This robust resistance to phishing offers malware protection because it hinges on the ability to detect these attacks before they take place.

Top Articles
Latest Posts
Article information

Author: Reed Wilderman

Last Updated:

Views: 5977

Rating: 4.1 / 5 (52 voted)

Reviews: 91% of readers found this page helpful

Author information

Name: Reed Wilderman

Birthday: 1992-06-14

Address: 998 Estell Village, Lake Oscarberg, SD 48713-6877

Phone: +21813267449721

Job: Technology Engineer

Hobby: Swimming, Do it yourself, Beekeeping, Lapidary, Cosplaying, Hiking, Graffiti

Introduction: My name is Reed Wilderman, I am a faithful, bright, lucky, adventurous, lively, rich, vast person who loves writing and wants to share my knowledge and understanding with you.