Yubico Security Key Series – FIDO2 / U2F Hardware Security Key

Yubico Security Key Series – FIDO2 / U2F Hardware Security Key

The Yubico Security Key Series is a series of hardware authentication keys designed to protect online accounts, applications, and services from login compromise and phishing attacks. These keys utilize the FIDO2/WebAuthn and FIDO U2F standards, enabling passwordless authentication, two-factor authentication (2FA), and multi-factor authentication (MFA).

Unlike codes sent via SMS or traditional OTP methods, the Security Key Series utilizes public key cryptography and a physical device in the user's possession. Authentication data is tied to a specific service, making FIDO-based solutions highly resistant to phishing.

The keys work with FIDO2/WebAuthn or FIDO U2F-compliant services, including Google, Microsoft, password managers, and many IAM (Identity and Access Management) platforms. They can be used by both individual users and in business environments.

The device requires no batteries or its own network connection. Authentication is performed by connecting the key to a USB port and confirming the operation by touching the device or – in the case of NFC-enabled devices – by holding the key close to a phone or other compatible device.

Key Features

Hardware security key for user authentication
FIDO2 / WebAuthn support
FIDO U2F – Universal 2nd Factor support
FIDO CTAP 2.1 support
FIDO2 Level 2 certification
Can be used as a hardware passkey
Passwordless authentication support
Two-factor authentication (2FA) support
Multi-factor authentication (MFA) support
FIDO mechanisms resistant to phishing and login data interception
Built-in Secure Element for cryptographic material protection
Support for up to 100 stored FIDO2 passkeys
USB and NFC communication
Battery-free
No internet connection required
Water and dust resistance according to IP68
Crush-resistant design
No moving parts
Intended for use with computers and mobile devices
Compatible with, among others Compatible with Windows, macOS, ChromeOS, and Linux
Device manufactured in Sweden
Firmware: 5.8.

Available Models/Variants

Security Key NFC by Yubico

Connector: USB-A 2.0
Wireless Communication: NFC
NFC Standard: ISO 14443-3 Type A
FIDO HID: Yes
FIDO2/WebAuthn: Yes
FIDO U2F: Yes
FIDO CTAP 2.1: Yes
FIDO2 Level 2: Yes
Number of Stored FIDO2 Passkeys: Up to 100
Dimensions: 18 × 45 × 3.7 mm
Weight: 4.1 g
Intended primarily for computers equipped with a traditional USB-A port and NFC-enabled mobile devices.

Security Key C NFC by Yubico

Connector: USB-C 2.0
Wireless communication: NFC
NFC standard: ISO 14443-3 Type A
FIDO HID: yes
FIDO2/WebAuthn: yes
FIDO U2F: yes
FIDO CTAP 2.1: yes
FIDO2 Level 2: yes
Number of stored FIDO2 passkeys: up to 100
Dimensions: 18 × 45 × 3.3 mm
Weight: 3 g
Intended primarily for modern laptops, computers, tablets, and smartphones equipped with USB-C and NFC-enabled devices.

Supported Security Features

FIDO2/WebAuthn – yes
FIDO U2F – yes
FIDO CTAP 2.1 – yes
Hardware Passkeys – yes
PIV / Smart Card – no
OpenPGP – no
OATH-HOTP – no
OATH-TOTP – no
Yubico OTP – no
Challenge Response – no
Static Password – no

The Security Key Series should therefore be considered primarily a specialized FIDO key series, not an equivalent to the multi-protocol YubiKey 5 series. For applications requiring PIV, OpenPGP, OATH/TOTP, Yubico OTP, or other additional features, select the appropriate model from the YubiKey 5 series.

Software Required

For standard use of the Security Key Series, no additional Yubico software is required.

The key utilizes the FIDO2/WebAuthn and FIDO U2F standards, which are directly supported by compatible operating systems, browsers, applications, and services. Once the key is registered with a supported service, it can be used without additional drivers or special manufacturer software.

Optionally, you can use the Yubico Authenticator app, which, in the case of the Security Key Series, allows you to manage FIDO2 features, saved passkeys, and the FIDO2 PIN, among other features. However, the app is not required for standard authentication with FIDO-enabled services.

Please note that the Security Key Series does not support OATH/TOTP. This means that the Yubico Authenticator cannot generate one-time TOTP codes for these keys, as can be the case with the multi-protocol YubiKey 5 models.

Applications

The Security Key Series can be used for, among other things:
Protecting Google and Google Workspace accounts
Protecting Microsoft and Microsoft 365 accounts
Securing access to Identity and Access Management systems
Authenticating in services supporting FIDO2/WebAuthn
Protecting password managers that support FIDO hardware keys
Passwordless login using passkeys
Providing phishing-resistant MFA
Protecting administrator and privileged user accounts
Increasing employee access security to cloud services
Protecting private accounts from phishing attacks.

Compatibility with a specific application or service depends on the implementation of the FIDO2/WebAuthn or FIDO U2F standards on that service's side.

Manufacturer: Yubico AB
Manufactured in Sweden, USA
Series: Security Key Series
Device type: Hardware authentication key
Supported protocols: FIDO2/WebAuthn, FIDO U2F, FIDO CTAP 2.1
FIDO2 certification: FIDO2 Level 2
USB communication type: FIDO HID
Available interfaces: USB-A + NFC or USB-C + NFC, depending on the model
NFC standard: ISO 14443-3 Type A
Firmware: 5.8
Passkey support: Yes
Fido2 passkey capacity: 100
Secure Element: Yes
ECC algorithms for FIDO2: P-256, P-384
Ed25519 support: Yes, for FIDO2
Power consumption: Less than 150 mW
USB transmission speed: 12 Mb/s
Declared connector durability USB: over 100,000 connection cycles
Declared number of write/erase cycles: over 500,000
Operating temperature: 0°C to +40°C
Storage temperature: -20°C to +85°C
Declared MTBF (Mean Time Between Failures): over 100 years
Crush resistance: up to 25 N m
Water and dust resistance: IP68
Power required: from USB port or NFC interface
Battery: no
Moving parts: no
Hardware compliance: including CE, FCC, RoHS, UKCA