Yubico YubiKey 5 Series – Multi-Protocol Hardware Security Key

Yubico YubiKey 5 Series – Multi-Protocol Hardware Security Key

The YubiKey 5 Series is a series of professional hardware security keys from Yubico, designed to protect accounts, applications, computers, and online services against phishing, credential theft, and account takeover. These keys enable strong two-factor authentication (2FA), multi-factor authentication (MFA), and passwordless login using the FIDO2 and WebAuthn standards.

Unlike SMS codes or traditional one-time code-generating apps, the YubiKey can use public key cryptography and a hardware-protected Secure Element. Cryptographic data remains on the device and does not need to be transmitted or stored in the cloud.

The YubiKey 5 Series supports modern authentication standards such as FIDO2, WebAuthn, and FIDO U2F, as well as solutions used in corporate environments and legacy systems: PIV Smart Card, OpenPGP, OATH-TOTP, OATH-HOTP, and Yubico OTP. This allows it to be used to secure online services and password managers, as well as workstations, enterprise infrastructure, and administrative access.

The keys work with hundreds of services and platforms, including Microsoft and Google accounts, Microsoft Entra ID, Okta, AWS IAM, 1Password, Bitwarden, Keeper, Duo Security, Salesforce, Dropbox, and many other solutions supporting FIDO or Smart Card standards.

The YubiKey 5 Series requires no batteries or network connection. Depending on the model, communication takes place via USB-A, USB-C, NFC, or Lightning. The design is designed for everyday use and meets an IP68 water and dust resistance rating.

Key Features

Phishing-resistant hardware authentication,
Supports 2FA, MFA, and passwordless authentication,
Supports FIDO2/WebAuthn-compliant hardware passkeys,
Multi-protocol design enabling use in both modern and legacy IT environments,
Secure Element protects keys and cryptographic data,
Battery-free,
No internet connection required for the key itself,
Supports computers and mobile devices,
Versions with USB-A, USB-C, NFC, and Lightning,
Can be used as a PIV Smart Card,
OpenPGP support,
Supports OATH-TOTP and OATH-HOTP one-time codes,
Supports Yubico OTP,
Rugged design for everyday use,
IP68 water and dust resistance,
Suitable for use in enterprise environments, government agencies, and by individual users.

YubiKey 5 Series Models/Variants

YubiKey 5 NFC

USB-A connector
NFC
Full-size key format
Dimensions: 18 × 45 × 3.3 mm
Weight: approx. 3 g
Suitable for computers with USB-A and NFC-enabled mobile devices

YubiKey 5C NFC

USB-C connector
NFC
Full-size key format
Dimensions: 18 × 45 × 3.7 mm
Weight: approx. 4.1 g
Suitable for modern computers, tablets, and smartphones equipped with USB-C or NFC

YubiKey 5C

USB-C connector
No NFC
Compact design
Dimensions: 12.5 × 29.5 × 5 mm
Weight: approx. 2 kg g

YubiKey 5 Nano

USB-A connector
Nano format
No NFC
Dimensions: approx. 12 × 13 × 3.1 mm
Weight: approx. 2.9 g
Intended primarily for permanent placement in a USB port on a computer or workstation

YubiKey 5C Nano

USB-C connector
Nano format
No NFC
Dimensions: 12 × 10.1 × 7 mm
Weight: approx. 1 g
Intended primarily for placement in a USB-C port on a device

YubiKey 5Ci

Two connectors: USB-C and Lightning
No NFC
Dimensions: 12 × 40.3 × 5 mm
Weight: approx. 2.9 g
Intended for, among other things, For computers and mobile devices using USB-C or Lightning. Hardware compatibility also includes Apple MFi certification.

Software Required

For basic use of the YubiKey with services supporting FIDO2/WebAuthn or FIDO U2F, installing dedicated Yubico software is not required. Key management is handled by a compatible operating system, browser, or service.

Depending on the intended use, additional tools may be used:

Yubico Authenticator – Recommended

Windows
macOS
Linux
Android
iOS / iPadOS

The application allows, among other things, the management and access of credentials stored on the YubiKey, generation of OATH-TOTP/HOTP codes, and configuration of selected key features.

YubiKey Manager – ykman CLI

Windows
macOS
Linux

A command-line tool primarily designed for configuring advanced YubiKey features, including FIDO2, OTP, and PIV, as well as checking the device model and firmware version.

The previous graphical YubiKey Manager GUI has been deprecated (EOL). The manufacturer currently recommends the Yubico Authenticator as the primary tool with a graphical interface.

YubiKey Smart Card Minidriver – optional

Windows

The driver can be used in environments using PIV/Smart Card functionality, including for certificate-based login and smart card management in a Windows environment.

The required software may depend on the specific system or service in which the YubiKey is to be used.

Manufacturer: Yubico AB, Sweden
Production: Sweden, USA

Technical Specifications

Manufacturer: Yubico AB
Brand: Yubico
Series: YubiKey 5 Series
Device Type: Hardware Security Key
Supported Authentication: 2FA, MFA, Passwordless
FIDO2: Yes
WebAuthn: Yes
FIDO CTAP 2.1: Yes
FIDO U2F / CTAP1: Yes
PIV Smart Card: Yes
OpenPGP: Yes
Yubico OTP: Yes
OATH-TOTP: Yes
OATH-HOTP: Yes
Challenge Response: Yes
Static Password: Yes
Hardware Secure Element: Yes
Number of Stored FIDO2 Credentials / Passkeys: Up to 100
Number of OATH Credentials: 64
Number of PIV Certificates: 24
Number of OTP Seeds: 2
Interface: USB-A 2.0, USB-C 2.0, NFC, or Lightning depending on the model
NFC: Depending on the model
NFC standard: ISO/IEC 14443-3 Type A
HID Keyboard: Yes
CCID Smart Card: Yes
FIDO HID: Yes
USB transmission speed: Up to 12 Mb/s
Power consumption: Less than 150 mW
Battery: No
Network connection via dongle required: No
Declared durability of the USB port: Over 100,000 cycles
Declared number of write/erase cycles: Over 500,000
Operating temperature: 0°C to 40°C
Storage temperature: -20°C to 85°C
MTBF: Over 100 years
Water and dust resistance: IP68
Hardware compatibility: Inc. CE, RoHS, UKCA, FCC
Current manufacturer firmware generation: 5.8
RSA for PIV/OpenPGP: 1024, 2048, 3072, and 4096 bit
ECC for PIV/OpenPGP: P-256 and P-384
Supported platforms: Windows, macOS, Linux, ChromeOS, Android, and iOS – the range of available features depends on the model, interface, system, and service used