Customer Ratings & Reviews

An essential part of my personal MFA security setup. Extremely reliable and durable - this is replacing a still functional Yubikey 2 USB that has been on my keychain and used daily for 10+ years. Looking forward to using this new key for another decade plus!

For a first timer not too bad. Never reset both YubiKeys if you read up on that you will see why May not be for you read first.

I'm trying out my first NFC key and decided to give the popular Yubico YubiKey 5 a try. Here are my thoughts and review: Passwords have always been a weak point in security since they were first introduced. Fortunately, the Yubico YubiKey 5 is here to protect our most important accounts and much more. The fifth generation of the YubiKey supports FIDO U2F for secure second-factor authentication and uses NFC to work with your phone. But that's just the beginning of what this remarkably powerful and tiny device can do. How Two-Factor Authentication Works A hardware security key, such as the YubiKey, is mainly used as a second factor for authentication. Two-factor authentication (2FA) involves an additional step after entering your password to confirm your identity. Utilizing 2FA offers stronger assurance of your identity and authorization to access the necessary resources. It also makes it more challenging for unauthorized individuals to gain access. While an attacker might acquire your password from the Dark Web, it is unlikely that they would also be able to obtain your security key. Additionally, the authentication provided by 2FA is temporary, working only once and usually for a limited time, which enhances security. The 5 NFC is the only YubiKey to offer wireless communication, but besides that the only difference among these devices is size, price, and USB connector. The YubiKey 5 Series stands out from the competition not only due to the variety of form factors, but also because these devices are versatile digital security tools. Each one can function as a Smart Card (PIV), generate one-time passwords, support both OATH-TOTP and OATH-HOTP, and be used for challenge-response authentication. All four devices support three cryptographic algorithms: RSA 4096, ECC p256, and ECC p384. These devices can serve various roles simultaneously, provided the user has the necessary expertise. The 5 NFC is the only YubiKey offering wireless communication, with the other differences among these devices being their size, price, and USB connector. Hands On With the YubiKey 5 NFC To help you get started, Yubico has created a useful guide for new users. Once you select your YubiKey device, the site will display a list of all the places and contexts where you can use your YubiKey. Some of these links will take you directly to a site or service's onboarding page, while others will provide instructions that you'll need to follow on your own. Setting up the YubiKey as a U2F second factor is very simple. Just follow the instructions provided by the site or service, and then insert the YubiKey into the appropriate slot when prompted. Simply tap the gold disk, and the service will enroll your key. The next time you log in, you'll enter your password and then receive a prompt to insert your key and tap it. That's it! Dashlane, Google, and X (Formerly known as Twitter) are just a few of the many sites that support U2F and accept YubiKey 5 Series devices. In my testing, I enrolled it as a second factor for a Google Account. When logging in on a desktop computer, I entered my login credentials, and then Google asked me to insert and tap my security key. This was no problem, although I did have to use the Chrome browser to log in. On my Android device, the process is quite simple. While logging in for testing, I entered my credentials and then my phone prompted me to use my security key. I selected NFC from a menu at the bottom and then tapped the YubiKey against the back of my phone. After that, the phone buzzed to confirm, and I was logged in. The YubiKey 5 Series offers various authentication methods, not just U2F. For example, with LastPass, you can enroll the YubiKey to generate one-time passwords (specifically HMAC-based One-time Passwords, abbreviated as OTP) with a tap. Although different from U2F, the process feels very similar in practice. To set this up, log in to LastPass, go to the appropriate section in the Settings menu, click on the text field, and tap the YubiKey. A string of letters will be generated, and that's it! From then on, when you want to log in to LastPass, you'll be asked to connect your YubiKey to generate more OTPs. Most of you are probably familiar with Google Authenticator, an app that generates six-digit passcodes every 30 seconds. This technology is known as Time-based One-time Passwords (TOTPs) and is one of the most commonly used forms for 2FA today. Yubico offers a unique take on the TOTP system alongside a companion desktop or mobile app. To use this with a YubiKey, plug in your YubiKey, open the Yubico Authenticator app, and then go to a site that supports Google Authenticator or a similar service. For example, to secure a Google Account, I selected the option to enroll a new phone with the authenticator app. Usually, a QR code appears at this point, and the site will prompt you to scan it with the appropriate authenticator app. Instead, I chose a menu option in the Yubico Authenticator desktop app, and it captured the QR code from my screen. After a few more clicks, the app started providing unique six-digit codes every 30 seconds. The Yubico Authenticator app is designed to generate TOTPs (Time-Based One-Time Passwords) exclusively when the YubiKey is present. Instead of storing the necessary credentials on your computer, the Yubico Authenticator securely stores that information directly on your YubiKey. If the YubiKey is removed, the Authenticator app is unable to generate new TOTPs. This feature is useful if you are concerned about the security of the device used to generate your TOTPs. Additionally, you can lock your YubiKey with a password, providing an extra layer of protection in the event of theft. Yubico also offers an Android app that can generate TOTPs and works with the YubiKey 5 NFC, allowing you to access your TOTPs on the go. Simply tap your 5 NFC against the back of the phone, and the app starts generating codes. When you close the app, the codes disappear, and you will need to tap the 5 NFC again to generate new codes. While this method is less convenient than storing the information in the app itself, it is significantly more secure. The YubiKey 5 Series offers additional functionalities. You can use it as a smartcard to log in to your desktop computer, log in to SSH servers, and even generate a PGP key that can be used for signing or authentication. However, it's worth noting that dealing with TOTP keys was challenging enough for me. Yubico has extensive documentation and multiple desktop and mobile apps, making it challenging for users to utilize all the features of the YubiKey without prior knowledge. While Yubico provides a website to inform customers about the capabilities of their key and guide them to the necessary information, it doesn't offer the same level of support typically found with tech products. Using the YubiKey for U2F is straightforward, but fully maximizing its potential can be difficult for both beginners and even experienced security journalists. The YubiKey to Success? The YubiKey 5 Series is an impressive family of devices that serves a wide range of purposes. Its primary function is as a FIDO U2F authenticator or an OTP generator, but it has many additional capabilities. However, selecting the right YubiKey from the various options available from the company has always been a challenge. Understanding the full potential of the device beyond U2F is also quite difficult. Yubico devices are top-notch and their documentation is improving, but they are primarily designed for security experts and IT professionals. If you are familiar with or curious about the extensive capabilities that the YubiKey offers, this is the device for you. This durable little device won't disappoint you. While YubiKeys are a well-established and mature technology, there is still much to explore in this field. I would highly recommend getting this. While it may take some time to learn and get used to, after a bit, it's smooth sailing from there.

I’ve been using hardware security keys for 5 years now for all my sensitive personal accounts, and thus far have not had any major issues with account theft. With the rising cases of identity theft and sophistication of the related scams that capture the information, it is even more important to do everything you can to secure your accounts. That’s why the YubiKey 5 is a must have in my opinion for all your sensitive accounts. Pros: - Easy to Use and Setup. - Compatible with multiple devices and accounts. - Secures accounts. Cons: - Only a single token per pack. Setup and Use: Setup for the YubiKey is rather straight forward and the same regardless of what account you’re using. For most accounts, you just have to navigate to the Account settings, then Security and Passwords, then there should be a setting for additional security, 2 Factor Authentication (2FA), or additional sign on options. Once you get to the point where it asks to use a device to login, you are at the right place. Then it is as simple as entering your existing credentials, inserting the YubiKey, and touching the central green light of the key. That will register the key to your account. The account will list the YubiKey under 2FA devices or Sign On methods. Then anytime you want to add or change your account details, you will need the physical hardware key to do so. This might seem troublesome or limiting, but that is the point of a hardware security key, it limits the way someone can login or change the account to a requiring a specific physical token. The only downside I can see to the Yubico hardware security key is that they come in only 1 per pack. Usually, with hardware keys, you want to have two; one you’ll keep on you at all times like attached to a key ring or phone and another in a static safe place in case your primary key is lost. This helps avoid account lockout of the most sensitive accounts. Compatibility: I’ve mainly used a security token for my Facebook, Google, and Microsoft accounts as they hold my email or other sensitive information. But Yubikey has expanded its use to many different accounts. You can check the “Works with YubiKey catalog” to see the full list of accounts compatible with YubiKey. If you use things like Twitch, Discord, Coinbase, or even password managers like 1Password and Lastpass are compatible with YubiKey. Passkey: But the benefit goes beyond just 2FA device, if your account supports PassKeys or Passwordless login, then you should be able to use the YubiKey to login instead of entering a code from a text, email, or authentication app. After setting up the YubiKey as a PassKey, just trigger login, select using Security Device or Token, and then insert or press the token against the device for NFC compatible devices. And you should be logged in! No passwords needed. Conclusion: If you’re serious about keeping your accounts locked down or want to add another layer of protection to your most sensitive accounts, then pick up a hardware security key. I would suggest the YubiKey 5, either a USB A or C port model, as it is highly compatible with most sensitive account types and easy to set up and use.

Everyone wants security with an online account. There are so many things that can go wrong: your password is too elementary, and an intruder figures it out; there is a password leak and yours is compromised; you forget your password and can’t get into your account- the list goes on. This YubiKey5 NFC offers a simple solution. It is very easy to set up and you will never have to worry about forgetting your password as long as you have your key with you. You can require its use to get into a particular device or a particular account. If the person trying to use your protected device does not have your YubiKey they, they aren’t going to get into your device without it. One question that begs an answer when you are trying to protect a device is what happens if you lose or destroy your key? In that case, you’d better have a backup YubiKey which is also registered to the same account or device. A case in point is Apple. They won’t let you register a key with a device unless you also register a backup key with them at the same time. That is good common sense, but I did not have a second key, so I was not able to follow that recommendation. It was easy to set up the Yubi with various accounts, and easy in most cases to remove the key if used as one of the two step verification methods. This Yubi key supports every conceivable protocol, and the list of accounts and services is vast. The set up is fast and easy, and the device is tiny, water resistant, and convenient to use. It is designed to store on your key chain. The only obstacle to its use, as far as I am concerned, is me. I fear that I would lose it and not have it available if I needed it. But it does what it is designed to do and is a great solution if a hardware authentication device is what you want and need. This is clearly the one to get.

It’s extremely easy to use. I got it to simplify using as a key to my 2 Factor Authentication (2FA) for logging into my work applications (we use PingID for 2FA). I was using my phone previously, but this is much faster. After setting it up as a security key for your service/account - simply plug it in the USB port on your PC/laptop and when challenged for 2FA you just touch the gold “Y” and that’s it. No more looking at the challenge numbers, unlocking my phone, opening an app and tapping the same challenge number, etc. I have to do this 15-20 times a day while working and this is a great time saver. I originally thought this would be a key that I would setup once to then unlock everything, but they don’t work that way. This isn’t a password manager, but rather a physical security key that you can then set up as an authentication method. Setup is simple, but can vary by service. Adding it to use with Microsoft, Google account, PingID, etc. are all a bit different and controlled by the service (vs. Yubikey). Most are pretty quick to add as a method for 2FA. One thing that Yubikey “strongly recommends” is having a backup key (also required for using on iPhone – more on that later). Which makes sense as it’s like having a physical key for your house. Issue is though that essentially doubles the cost and these aren’t inexpensive. In my case I had to order a 2nd one and then add that second key to everywhere I had setup already. Do yourself a favor and get a 2nd key prior to setting this up and then just register both keys on each of your preferred accounts. This key also has NFC so you can use it with an NFC capable smartphone (I have an iPhone 13 Pro and it works very well with it). 2 tips on setting it up on your iPhone 1) You must have 2 keys (ie. A backup key) to add to your Apple account. 2) You’ll want to do the setup when you’re in a known place like your home. I was traveling when I tried to set mine up and iPhone made me wait an hour delay for security purposes because I wasn’t home. This is a safety feature in case your phone has been stolen. The one drawback of this bigger NFC capable key is that it sticks out of the USB port and I’m worried about breaking it when I put it in my laptop bag for traveling with it. So instead I remove it a lot and worry a bit about losing it (another reason for backup key!) I might also pick up one of the mini ones that I can just leave it in the USB port without worrying about breaking it. All in all - I like the security of a physical key and the time it saves me quickly unlocking my work applications with a simple tap.

I picked up the YubiKey 5 NFC to level up my digital security, and it’s been an absolute game-changer. Setup was quick and intuitive—plug it into a USB-A port or tap it via NFC on my phone, and I’m instantly authenticated. It works seamlessly across major platforms like Google, Microsoft, GitHub, and even password managers like Bitwarden and 1Password. What really stands out is the peace of mind. This key supports multiple protocols (FIDO2, U2F, OTP, Smart Card, OpenPGP), making it future-proof and versatile. Whether I’m logging into sensitive accounts or securing my crypto wallet, I know I’ve got hardware-level protection that’s virtually immune to phishing and remote attacks. The build quality is excellent—compact, durable, and easy to carry on a keychain. No batteries, no software installs, just plug-and-go security. If you’re serious about protecting your digital identity, the YubiKey 5 NFC is worth every penny.

I ordered the USB-A version of the YubiKey 5 NFC. Some newer computers don’t have that type of port so you may want to order the USB-C version. They also recommend having 2 keys, a primary and a back-up key. That is logical because if the YubiKey is lost, damaged or fails you will need a second one to login. My suggestion if you haven’t used a security key like this before is to read the instructions and watch a video or two. You want to use it to its full potential. Setup can be time consuming, depending on how many programs you want to setup. The key is used for second-factor authentication. You login first with a login and password and then the key provides another layer of security. It is compatible with Google, Microsoft, LastPass and many other programs. You may have to look online for how it works with your program. LastPass has nice directions and so do many other programs. The YubiKey has a loop on the top for a keychain but it doesn’t come with a case. It should have a case so it doesn’t become scratched or damaged. That should be included. I really do like the YubiKey and it does work well. Please add a case to minimize damage.

The Yubico YubiKey 5 NFC is an amazing security device, it's a compact USB device that allows you to authenticate your accounts securely with a tap of the key using NFC or plugged in via USB with a tap! I have had two-factor set up for a while using an app, I am familiar with security keys as I have used one for a while at work and it's a convenient way to verify it's you with a physical device and a pin. The YubiKey comes alone in it's pack, you can easily browse to their page to download the YubiKey Manager and review the guides Yubico provides to set up your various accounts! The YubiKey Manager allows you to view you device firmware and serial, manage USB and NFC Interfaces, plus OTP, FIDO2 and PIV applications. The OTP settings are pretty awesome, you can set a short touch or a long touch to do four things; Yubico OTP, Challenge-Response, Static Password or OATH-HOTP. Currently I have OTP set (One Time Password) so I can short tap the device to authenticate 2FA during sign in, instead of using a text or app two factor. For long press I set up a password for my email as a test, and static password simply types in the static password that you saved to the security key! The YubiKey 5 is pretty compact, which makes it convenient to keep on you, the keyring hole is convenient to hang it off something. I keep the YubiKey on a keyring in my bag at work, this allows me to have it on me when I need it, but have it easily removable so when I get home I can plug it in to my USB hub at home when I use it most. Having a personal USB Two Factor device is great, you can setup up Microsoft, Ubuntu, Apple, Google, Facebook, Nintendo and many other accounts to use a security key, and with all the security threats, this helps give you a piece of mind! Some accounts require having a secondary key as backup, plus it is recommended to have a spare, I am going to look at getting the USB-C Model also. They do state it's easiest to set up both at one time, I would pick up two when you are getting started, especially if you are looking to secure your Apple account it did require me to have two before setup.

Yubikey is an amazing device to help put an extra layer of security on any of your devices or any of the accounts that we all now have. I'm old enough to remember the days of doing things over the phone and giving a customer rep your password or answering a preset question. Although I'm sure that that way of doing thing is still available, most people now do things on their phones or computers and with so many different accounts from a simple Netflix account to a more important banking information, it can all be more secure with an extra layer verifications, actually, everyone should have an extra layer. Yubikey can help with this and it does it very well. The setup process is super simple. You can go on to their website and they have a short video with setup. I use chrome as my main operating system and the setup process was super simple. Just log into your account and click on 2 step verification, follow the prompt for a security key, then put my index finger on the the Yubikey and boom, it was done. That's it, you couldn't make it easier. Now, you have to do this with each and every other system you want to protect, i.e. Apple, Microsoft, Vanguard etc. But you once done, it will add another layer of protection. The Yubikey also has a NFC feature which is great for devices that accepts that especially most newer phones. You really need this in this day and age.

I've been using Yubikeys for around 10 years now. As a passkey, it's both safer and easier to use than the ones built into our operating systems - When you first plug in, you enter a pin, press the shiny gold button, and you're in. As long as the key stays plugged in, the next time, you just press the button. On top of that, this can securely store those 6 digit rolling codes used by Google Authenticator, and move them from one device to another, while giving you the ability to easily copy and paste those codes. Which means saving time while staying secure. That only begins to scratch the surface of what these can do. They can also act as a smart card login for your PC, securely encrypt your email, and even securely store code signing certificates for app developers. And they best part is that it's as good at keeping secrets as it is easy to use. Well worth the price for the convenience and piece of mind.

I bought the YubiKey 5 NFC and it’s been very reliable. The USB-A plug and NFC option give great flexibility between my older laptop and mobile phone. Setup was straightforward and I feel much more secure using it than relying on app-based 2FA. A smart purchase.

I have had many different yubikeys and equivalents over the years, but they don't work with the latest passkey requirements at google. This yubikey 5 works perfectly with the pin and passkey requirements currently at google. Get one - don't get locked out of your account with an old version.

This is a great device for security. I use it for everything that supports it. I haven't found any limitations with it actually; the only limits are on the part of the services themselves. For instance, some places use the key as two-factor authentication, while others use it as the "password" itself. Some places don't support it at all, but for every high stakes service I use (AWS, Microsoft, Discord), they all support it very well. The NFC works with my phone even with the case on, though I have to rub it around sometimes to find the spot, but I'm pretty sure that's the fault of my phone (or even myself). I got the USB-A version because I use this mostly with my computer, but when I use it with my phone, I wish I had the USB-C version. I use a USB-A to USB-C converter to fix this. If you have easily accessible USB-C ports on your computer, I extremely recommend getting the USB-C version of the Yubikey. I only got the USB-A version because the USB-C port on my computer is on the back in a hard to reach spot, plus I have the converter. Anyways, 10/10 product and great for security. Just make sure to consider getting a backup key in case you lose your main and combine this with a password manager for ultra security that not even my uncle jim could break.

The YubiKey arrived as advertised, and I was reassured to see that this seller is listed as an official vendor on Yubico’s website. This guarantees authenticity and that the device comes directly from the supplier. Setup was straightforward, and the FIDO2 functionality worked seamlessly with my online accounts that support security keys. It provides an extra layer of security without much hassle. If you’re looking for a reliable hardware security key, this is a great option.

I was happy to see that Best Buy started stocking up yubikey since I needed a back up just in case I lost Monday night. Set up is easy but, might take some time depending on how many accounts you’re going to add. I’d definitely recommend the two pack if you don’t already have one for a back up key in case one goes missing and you aren’t locked out. This also make it a lot more difficult for account to get hacked into if your using this for 2fa and can also be used with the authentication app on your mobile device.

It is working well without any issues and it is compact device, well set my laptop.

This is a great, open-source authenticator from a company focused on security and privacy. It is simple to use and has no unnecessary features. I recommended it for its transparency and simplicity.

Works as intended. Not many services use this kind of passkey yet, but they are increasing in popularity. For those who don't know, this is a 2 factor authentication option in addition to a login/password combination. It can replace the use of your phone as either a 2FA text, or authentication app, so if you don't have your phone you can still access services like Google, Bitwarden, WhatsApp, etc that support this passkey. However, there are a many financial institutions that have yet to move to using this 2FA option. FYI this will not replace your password on most services. This is mainly an option for 2 factor authentication.

Works as advertised. Used it to perform a bank to bank transfer of funds. The security key only requires a finger touch to securely do on-line banking.