Customer Ratings & Reviews

It’s a nice device to keep secure your authenticity

Privacy! If you don't have one, two, or even three, it's never too late!

Works ok for the most part, people are still able to bypass and hack my phone

I've been wanting to try a device like this for some time now. With internet thieves working overtime to steal any information they can get, an extra layer of security never hurts. The YubiKey 5C NFC is incredibly small. Smaller than your average house or car key. This is good and bad. Great for carrying it around, bad because it could be easy to lose. In fact, during the set up process it is recommended to set up two YubiKey's at the same time so as to have a backup. I haven't done this, but I can see why it would be a good idea. The YubiKey 5C NFC works very well. Being able to use it as an NFC device or being able to use USB-C is great. There are a ton of compatibility. It has been really thought out in this regards. Once you have it connected to whatever it is you are securing, it works just fine and gives a great piece of mind that you have the added security. So why not give it 5 stars? Well, it can be a bit troublesome to set up. I don't really blame this on the YubiKey itself. It is really more of an issue with there being so many different websites you will want to connect it to and each has it's own set of protocols. Most are easy to set up, others not so much. If you are a very tech savvy person (or better yet an I.T. person) you shouldn't have much trouble. But for the average home user it might feel overwhelming. But don't get me wrong, the extra piece of mind is worth the hassle.

I’ve had difficulty getting it set up with Coinbase.

Not as-friendly as I anticipated. Even the app installed, my phone and do not it a passkey. Additionally, it cannot be used to sign into a Windows PC.

The requirements for a hardware-based security key are simple: it needs to be secure, it should be easy to set up and use, it should be well-built, and finally it should be convenient. And the Yubikey 5C NFC checks all the boxes. In terms of security, it supports all the latest cryptographic standards out there. Not being a security expert, I rely on information from other experts and websites, and from what I could understand the Yubikey 5C seems to have no issues at the moment. One really good aspect of Yubikey is that it supports most of the systems out there: WebAuthn, FIDO2 Universal 2nd Factor, Smart card (PIV-compatible), Yubico OTP, OATH – HOTP/TOTP, OpenPGP, and Secure Static Passwords. What it means is most of the webservices I commonly use everyday are covered by one protocol or the other (especially since most services support WebAuthn, FIDO2 or OATH. Also, Yubikey provides specific set up guides for a lot of services, and I haven’t found one that is missing for me (YMMV). And using it is just a charm - for my PC I use the USB-C connector, and for my Android smartphone I use the NFC (with the fall-back to USB-C if needed). This makes the key extremely useful and versatile, making security convenient without being a roadblock. The make is durable - it is IP68 rated so it’s water and dust resistant. It didn’t feel flimsy and I was comfortable enough to keep it with my keychain - no need for babying. A convenient hole makes adding a loop-insert easy. The Yubikey 5C NFC is a true universal device and supports Windows, macOS, ChromeOS and Linux. As for services, a “work with Yubikey” page guides all the supported platforms. There 2 accompanying apps that can work with the 5C NFC - the Yubico authenticator app which is a multi-platform authenticator app (surprisingly supporting Windows desktop - a rarity), and a Yubikey Manager that helps do some configuration stuff. In summary, I don’t think there’s any other hardware security key that’s available to consumers with such a broad array of features. It’s worth the price due to NFC capability. For security conscious user I think this is a must have.

It is a good product but a bit hard to pair with ios

Great idea especially for someone who’s been dealing with compromised account just difficult to install.

Good product but doesn’t work for government certificates. Have to buy at yubico website for that.

No instructions, can’t find help on line on how to get it to work.

I downloaded the instructions and was unsuccessful in figuring out how to use it. I have tried multiple times and still unsuccessful. I purchased two as that was the recommendation to have a back-up. Waste of my money.

You may have noticed that many sites and Internet apps now support Passkeys. Many are starting to encourage/prompt for their use more and more. The reason is security. The YubiKey 5C NFC provides a physical layer of security that is much harder to compromise than traditional passwords or Instant Message type two-factor authentication. Phishing attacks will fail since a hacker will not have the required passkey to gain access. Passkeys are your accounts best defense these days. The sooner you can start using them, the safer your accounts containing data, money, and credit become. If you have never used a passkey before, there is a bit of a learning curve. There is no documentation that comes with the key. But manuals and videos are available on the Yubico web site. You will find some guides to get started including Best Practices Guide that is useful. There are also helpful videos. Each service is a bit different in how you enroll a key, and how many keys you can have. The Yubico web site has directions and/or videos on registering and using the Yubico Key on every site and app I use. Like most things, after you do one or two it becomes easier. If you are using a Mac PC, you will need two Yubico Keys to get started. This is force you to have a backup, so you don’t get locked out. It’s a good step regardless of your platform, you should always have at least two keys, a primary and a backup you can access easily if needed. I bought a third to place one in my bank safe deposit box for a secure off-site backup in case something ever happens to my home. The Yubico key is thin and very light, easy to carry on your keyring. You may need to use a thin intermediate ring as the hole on the 5FC is very small. The USB end is open with no cover included. Sand, dirt, pocket lint and other debris can easily find their way in the plug end. Silicone and plastic covers can be found easy enough, and I bought some. But these are bound to work off in a pocket or otherwise get lost, so get some extra ones. It would be nice to see Yubico make an integrated cover where the USB end is covered and protected from pocket lint and other debris but can be easily slide or rotate out when needed. There are several USB thumb drives that do this. The YubiKey 5C NFC’s ability to work with both USB-C and NFC means you can use it across different devices without the need to carry multiple keys or adapters. I use a Mac Boor Air, an iPhone, Windows tower, an a few Window Laptops. Going between them all is seamless. Once you authenticate with the YubiKey, your authentication is saved so you don’t need to use the hardware key each time you log in. The Yubico YubiKey 5C supports 25 accounts. If you need more than this, you could use a second set of keys. Or maybe it makes more sense to secure your most valuable accounts; banking, medical, work, shopping sites with your payment info saved, and your email accounts, especially email accounts that can be used to reset account passwords. If you want to keep access to your accounts secure, using the YubiKey to add a physical security layer that takes advantage the latest security protocols is not only easy after a small learning curve, but a wise move.

Physical security keys are a great way to protect online accounts, and the YubiKey 5C NFC does the job well. This sort of thing has been around for a while in business/corporate and government settings but has really been expanding into the personal consumer market lately. By now, most of us have logged into a website using a one-time code that arrived via text, email, or was generated by an authenticator app. The idea behind the YubiKey is that instead of entering a code, you present a physical device that stores your credentials for multiple services and/or websites. One benefit to this approach is that it eliminates the possibility someone intercepts a code while it’s on its way to you. Another is that the YubiKey, when properly configured, will only present credentials to the *correct* service/website, not a fake. The “5C NFC” isn’t the smallest security key in Yubico’s lineup, but it’s still rather compact, and I found it fit nicely on my keychain. It could also attach to a lanyard. The fact that this model supports both USB-C and NFC means that I can plug it into a desktop computer or laptop or tap to use it with my mobile phone. The packaging was simple and tamper evident (need to tear it open to access the device). The only documentation was the address for a “Let’s get started” site, but that turned out to be a fantastic resource. There’s an intro video followed by a catalog of the many services that support YubiKey for authentication, each with links to step-by-step instructions. Less than 15 minutes after opening the package, I had already set up my YubiKey to work with my email service, my cloud backup provider, and most importantly (to me, at least) my password manager. Overall, I’m excited to have the YubiKey 5C NFC in my online security toolbox.

best buy sent me an empty package, then scheduled pickup for a replacement, that never arrived to the store on the first day it was supposed to be there. then not for another week. still waiting for it, terrible experience.

Two factor authentication is the most secure way to protect your sensitive information. Verifying with an email address or mobile number is much better than a password alone, but these methods can be exploited by bad actors. A security key is the most secure form of two factor authentication. Setting up with most major accounts is very simple. The YubiKey 5C NFC can be used by plugging into a USB-C port or wireless if your device supports wireless NFC technology. Look in your account, normally under Security, for the option that says security key. You will be prompted to connect the security key and all you do is connect the YubiKey device and tap the button on the top. Once setup, anytime you connect to the configured account on a new device it will prompt you to connect the security key. Noone can connect to your account unless they have this physical device. Make sure you keep in a safe place, and it has an opening that allows it to be placed on a keychain or necklace. It is super light and seems well made. I wish it came with a USB-C cover, but these can be purchased for cheap and there is a large variety of protective cases available. I put a USB-C cover on it, and it looks really slick, and I feel I can carry it around protected. I own several brands of security keys and YubiKey is one of the lightest and most compact available.

It didn't work. I really need to try to return it but the text message with the invoice link said the invoice was no longer available.

I want to start by thanking the Best Buy Tech insider's network for sending me the Yubico YubiKey for review. Security should be the first thing on people's minds when they turn on their computer or use their phone. Unfortunately most people don't think about it or care enough to try to protect themselves. Many clients that I deal with tell me that they use a good secure password for everything - all their sites, their banking, their accounts, etc. They actually think that hackers sit around and try to guess people's password. They don't realize that hackers use sophisticated software to run through thousands of passwords per second. The fact that they use a "3" in place of an "e" or use their dog's name or other such fact seems to make them feel like they outwitted the hackers. When they eventually get hacked, they wonder why as they think they used a good password. Using the same password on more than one site or account is the worst thing you can do. I know you are going to say "but I can't remember so many different passwords" and now with Yubico's Yubikey you don't have to. After setting up the YubiKey, when you get to your favorite site that asks for your password, all you have to do is insert it into your computer's (or phone's) USB jack, tap the button on the YubiKey and your password gets inserted into the website's login screen and you didn't have to remember anything. Granted that not every site allows you to setup the YubiKey to enter the password but major sites like Google, Apple, Microsoft and many others do. More sites are allowing it all the time. Setting up the YubiKey in my opinion is not a device for the technically challenged as it takes some computer skills to set it up. The instructions that Yubico has on their website is fairly complicated but they have an excellent supply of videos that help you learn how to set it up. If that's not enough, just go on YouTube.com, search for "setup YubiKey" and you will find a lot of videos by people who know what their doing and can explain it to you in a way you can follow along. It's not a difficult procedure but you really need to see it in a video if following written directions just doesn't work for you. You should purchase two YubiKeys in order to make a backup key in case you lose the first one. Some sites like Apple require you to make two security keys at the same time. The keys work on Macintosh, Windows, Linux, etc. and they come in different styles to fit different computers. The one I have has a USB-C plug for newer computers and phones but they are available in the older USB-A style and even one with a Lightning plug for the older iPhones. You really need to use a security key like Yubico's Yubikey to be safe online since using a password like "123456" will likely clean out your bank account.

Account security is (or should be) on the mind of everyone using the Internet these days. It seems like every day there is news of a new breach, a new huge set of accounts and passwords leaked on the dark web, or even personally having an account compromised. As a defense against these kinds of attacks where a single password can grant access to an account, many service providers are now starting to offer multi-factor authentication. This can be as simple as a text message or an e-mail with a code to verify that you are who you say you are. The most advanced methods are called “passkeys” – an ultra-secure method of creating a trust between a device, such as a Yubikey, and the website or service being accessed. Passkeys typically require something you have, such as the Yubikey, and something you know or are, either the account password or a PIN, or a biometric authentication with a fingerprint or facial recognition. The other advantage is that passkeys are much easier to use than long, complex passwords. One of those rare times where the more secure option is also more convenient. As the world slowly moves beyond passwords to a passkey-based method of authentication, a YubiKey may be a useful thing to have around. Hardware wise, there isn’t much to talk about. The device is a small, thin, key that has a touch sensor, USB-C, and NFC connectivity. It’s very solidly built and designed to go on a keychain in a pocket. Setting it up was also very simple – I signed into a google account, went to account security settings, and added it using an iPhone and the NFC feature. I then went to a Windows 11 PC that had never been signed into that account, and used the key as the second factor to prove who I was by plugging it into a USB-C port and touching the touch sensor when prompted. It’s easy to use. The real question is, do you need it? For enterprise use, a Yubikey can provide a way for a company to secure their services without having to force employees or contractors to install apps on a personal phone or issue a company phone, so there is a big commercial market. As a home user, most of the services now supporting passkeys can also use your phone or PC as the passkey, instead of needing to carry the Yubikey around. The big advantage of a Yubikey is that it isn’t tied to any single device, and since it is offline and unplugged most of the time it is extremely secure. It can also be a great backup passkey in the event that you lose your phone or it breaks and you need to get into your accounts while getting set up on a new device. It is an inexpensive extra layer of security as the world continues to move beyond passwords and into a more secure (and convenient) world of passkeys.

I’m not sure why, but I’d always been a little intimidated by the thought of switching over to a hardware based security key. Now that I’ve tried the Yubikey, I realize I shouldn’t have been afraid of doing so. The procedure to add a Yubikey as an authentication method largely depends on what service (Google, Microsoft, Facebook, Coinbase, etc…) you’re adding the security key to. So far, I’ve only added it to a couple of services, but it has been extremely simple. If you’ve ever added something like Google Authenticator as a 2FA to a service, adding a Yubikey will be similar, and even simpler in most cases. Yubico highly recommends having a second Yubikey, and also adding that as an additional 2FA method when you add the first key, just in case something happens to one of your keys. Although this sounds a bit daunting (expensive), every service I’ve added the Yubikey to so far has also let me keep my prior 2FA method as a backup. Granted, in order to take full advantage of switching to a hardware security key, you should disable other 2FA methods. But that’s going to be a personal choice. Using the key as 2FA to access a site/service is very simple. Just login with username/password, insert your key when prompted, then touch the key when prompted. Done. Some sites will also prompt you for your security key PIN, but it’s still very simple. And if you’re logging in from a mobile device that supports NFC, you don’t even need to plug the Yubikey in - just tap it to your device. The only thing that somewhat concerns me about this particular key is that the USB-C connector is exposed. Not sure how much pocket crud it’s going to collect, but we’ll see. So, if you want to take the next step in securing your accounts, Yubikey is a good choice.