-
The safest authenticator app experience across mobile and desktop
Download now
Yubico Authenticator adds a layer of security for online accounts
Generate 2-step verification codes on a mobile or desktop device
Experience stronger security for online accounts by adding a layer of security beyond passwords
Secure all services currently compatible with other authenticator apps, including Google Authenticator
Hardware-backed security
Add your credential to the YubiKey with touch or NFC-enabled tap. Hardware-backed strong two-factor authentication raises the bar for security while delivering the convenience of an authenticator app.
Users can also experience greater convenience by unlocking their YubiKey with FaceID or TouchID.
And, users can use smart card certificates stored on the YubiKey to authenticate with other apps and sites, using their iPhone or iPad by leveraging Apple’s keychain capabilities that now extend to crypto assets.
Easy and fast setup
Generate your unique credential using QR codes available from the services you wish to protect with 2FA. Secures all the services currently compatible with other Authenticator apps. For example, Azure MFA supports TOTP authentication to secure Office 365.
Secure multiple work and personal accounts
Start protecting all of your accounts with stronger two-factor authentication. Easily generate new security codes that change periodically to add protection beyond passwords. And your secrets are never shared between services.
The YubiKey advantage
Stronger hardware-backed security
Storing your credentials on a hardware key is safer than storing them on a mobile phone. Your credential stays safe in the secure element of the YubiKey and cannot be extracted.
Cross-platform coverage
The Yubico Authenticator app works across Windows, macOS, Linux, iOS and Android. Get the same set of codes across all Yubico Authenticator apps for desktops as well as for all leading mobile platforms.
Portable credentials across devices
Your credentials work seamlessly across multiple devices. With a portable hardware root of trust you do not lose your credentials when your phone is compromised or upgraded.
Self-service reduces IT costs
Users switch phones often. With other authenticator apps, when a user has a new phone or OS upgrade, IT often needs to help reset the enrollment flow and support calls rack up costs.
The Yubico Authenticator app allows for user self-service to enroll multiple secrets across various services, making this a secure and efficient solution at scale.
Download Yubico Authenticator
Yubico Authenticator for Desktop
Use the Yubico Authenticator for Desktop on your Windows, Mac, or Linux computers to generate OATH credentials on your YubiKeys.
Linux
Mac
Windows
Yubico Authenticator for Mobile
Use the Yubico Authenticator for Android and iOS, including secure tap-and-go authentication for NFC-enabled mobile devices.
Android
iOS
Say hello to the YubiKey, and get protected against phishing.
FAQs
Yubico Authenticator? ›
Open the Yubico Authenticator, hold the YubiKey up to the NFC adapter at the request of the app and touch the metal part of the key. Click the add account icon in the top right corner of the app. Enter the secret key manually or scan the QR code to add a new account to the app and sync it with the server.
How do I use Yubico Authenticator? ›Open the Yubico Authenticator, hold the YubiKey up to the NFC adapter at the request of the app and touch the metal part of the key. Click the add account icon in the top right corner of the app. Enter the secret key manually or scan the QR code to add a new account to the app and sync it with the server.
Can I use Yubico Authenticator without YubiKey? ›The Yubico Authenticator App requires a YubiKey 5 Series to generate OTP codes.
Is Yubico Authenticator free? ›Yubico Authenticator | F-Droid - Free and Open Source Android App Repository.
Why use YubiKey instead of Google Authenticator? ›Authenticator apps provide a layer of security and are a convenient option for use by many, but they are still vulnerable to phishing due to the 30-second window. Security keys, like the YubiKey, are considered to be both more convenient and more secure.
What does the YubiKey authenticator do? ›The YubiKey is a device that makes two-factor authentication (2FA) as simple as possible. Many apps, online services, and computers enforce 2FA every time a user wants to connect. Instead of a code being texted to you or generated by an authenticator app, you press a button on your YubiKey, and you're logged in.
Can I use YubiKey instead of authenticator app? ›YubiKey is a physical security key which enables strong multi-factor authentication into a variety of systems. Enterprise Technology & Services recommends YubiKeys in situations where phone (either phone call or text message) or authenticator app is not an option.
Do I need an app for YubiKey? ›The versatile YubiKey requires no software installation or battery so just plug it into a USB port and touch the button, or tap-n-go using NFC for secure authentication.
What is the difference between YubiKey and security key? ›The Security Key Series differs from a YubiKey 5 Series in that it comes only with the FIDO (FIDO2/FIDO U2F) protocol and does not have a serial number. It is only available in USB-A + NFC and USB-C + NFC form factors.
Can YubiKey replace passwords? ›With these new capabilities, the YubiKey enables the replacement of weak username/password credentials with strong hardware-backed cryptographic key pair credentials.
Why is YubiKey so expensive? ›
It is costly to design, mould, manufacture, sell and support a hardware product, even something as small as this. Since you don't want your 2FA company to go out of business there is good value in knowing they have a stable business model that can actually support a company rather than just burning capital.
Is Yubico a Chinese company? ›Yubico is founded in Stockholm, Sweden making secure login easy and available to everyone, and enabling one single authentication key to work across any number of services.
Is YubiKey a good idea? ›Premium features, premium price. The Yubico YubiKey 5C NFC supports many authentication protocols, so it works anywhere security keys are accepted. If you can make the most of its advanced features, such as signing and encrypting with OpenPGP, it's well worth the price.
Why is Google Authenticator not good? ›The fundamental problem is that, the QR-code that is shown to you on screen, is the very private key of your Google Authenticator set up. If that QR-code is snatched, any person on earth can generate your one time passwords without you even knowing. It's a fake sense of security you can't trust.
What is the downside of Google Authenticator? ›In 2020, Android malware was found stealing one-time passwords from Google Authenticator. Moreover, the lack of additional security layers has been noted, specifically the lack of passcode or biometric security on the app which only raises the risk to organizations if a device is stolen or lost and infiltrated.
Does YubiKey prevent hackers? ›Yubico offers the phishing-resistant YubiKey for highest-assurance multi-factor and passwordless authentication. YubiKeys stop phishing attacks and account takeovers 100% and are simple to deploy and use. They also help reduce IT help desk costs related to password resets by 75%.
How do I enter a key in authenticator app? ›For Google Authenticator App
Tap on the "+" sign again, and you'll see two options. Choose the "Enter a Setup Key" option, then paste the copied key.
To manually add the secret key, select Add account manually, then enter the credential name, and type the secret key that you previously saved as a backup.
How do I use my YubiKey on my phone? ›Wirelessly (NFC) - Using NFC, users can have a “tap to Authenticate” flow with a YubiKey 5 NFC, essentially touching their NFC enabled YubiKey devices to their mobile platform when prompted.
Where do I find my YubiKey code? ›To view the credential, tap and hold your YubiKey on the back of your phone where the NFC antenna is located. Yubico Authenticator displays the six digit code associated with this credential. This is the code you need to enter to authenticate when using two-factor authentication.