Yubico YubiKey Bio Series – Biometric Security Key with Fingerprint Reader

Yubico YubiKey Bio Series – Biometric Security Key with Fingerprint Reader

The YubiKey Bio Series is a series of hardware security keys from Yubico that combines phishing-resistant hardware authentication with a built-in fingerprint reader. This solution enables convenient user authentication using a fingerprint, or if biometrics are not supported, a PIN.

The YubiKey Bio is designed primarily for secure passwordless login and multi-factor authentication (MFA). The key utilizes the FIDO2, WebAuthn, and FIDO U2F standards, allowing it to work with online services, identity management systems, password managers, and enterprise environments that support these standards. Current FIDO Edition models can store up to 100 FIDO2 hardware credentials/passkeys.

Biometric data is not transmitted to the online service during authentication. Fingerprint templates are stored in a secure Secure Element located inside the key. A maximum of five fingerprints can be registered on a single device.

The YubiKey Bio Series is available in two basic hardware versions – USB-A and USB-C. The keys require no batteries, no moving parts, and no dedicated network connection. The design is IP68-rated and crush-resistant.

The series includes two functional families:

YubiKey Bio – FIDO Edition – designed for FIDO2/WebAuthn and FIDO U2F authentication,

and

YubiKey Bio – Multi-protocol Edition – an enhanced enterprise version that, in addition to FIDO, also supports PIV/Smart Card and allows the same fingerprint and PIN to be used for web authentication and workstation login.

Key Features

Hardware security key with built-in fingerprint reader
Phishing-resistant authentication
Passwordless login support
MFA support (Multi-Factor Authentication)
Strong two-factor authentication support
Biometric fingerprint authentication
PIN support as a backup method
Storage of up to 5 fingerprint templates
Biometric templates stored directly in the key's Secure Element
FIDO2
WebAuthn
FIDO U2F
FIDO CTAP 2.1
Hardware passkeys
Up to 100 FIDO2 credentials/passkeys in current models
PIV / Smart Card in Multi-protocol Edition
USB-A and USB-C versions
No NFC
No Lightning port
Battery-free
No moving parts
No need to connect the key to the internet
IP68 water and dust resistance
Dust-resistant Crush-proof
Compatibility with Windows, macOS, Linux, and ChromeOS
Compatibility with popular browsers and services supporting FIDO2/WebAuthn

Models / Variants

YubiKey Bio – FIDO Edition
Connector: USB-A 2.0
Fingerprint reader: yes
NFC: no
Lightning: no
FIDO2/WebAuthn: yes
FIDO U2F: yes
PIV: no
Number of enrolled fingerprints: up to 5
Number of passkeys: up to 100
Dimensions: 18 × 45 × 3.35 mm
Weight: approx. 4.5 g
Current firmware version: 5.8
Manufactured in: Sweden

YubiKey C Bio – FIDO Edition
Connector: USB-C 2.0
Fingerprint reader: yes
NFC: no
Lightning: no
FIDO2/WebAuthn: yes
FIDO U2F: yes
PIV: no
Number of enrolled fingerprints: up to 5
Number of Passkeys: up to 100
Dimensions: 18 × 45 × 3.75 mm
Weight: approx. 5 g
Current firmware version: 5.8
Manufactured in Sweden

YubiKey Bio – Multi-protocol Edition
Connector: USB-A
Fingerprint reader: yes
FIDO2/WebAuthn: yes
FIDO U2F: yes
PIV / Smart Card: yes
Common PIN for FIDO2 and PIV
Common biometric templates for FIDO and PIV
Windows login possible using PIV and fingerprint
FIDO2 web authentication possible using the same fingerprint
No NFC
Intended use: Enterprise environments requiring both FIDO and Smart Card
Availability: Only with YubiKey as a Service / appropriate Yubico subscription plan

YubiKey C Bio – Multi-protocol Edition
Connector: USB-C
Fingerprint reader: yes
FIDO2/WebAuthn: yes
FIDO U2F: yes
PIV / Smart Card: yes
Common PIN for FIDO2 and PIV
Common biometric templates for FIDO and PIV
Windows login possible using PIV and fingerprint
FIDO2 web authentication possible using the same fingerprint
No NFC
Intended use: Enterprise environments
Availability: Only with YubiKey as a Service / applicable Yubico subscription plan

Software Required for Operation

For standard use of the YubiKey Bio FIDO Edition with a service supporting FIDO2/WebAuthn, installing a dedicated Yubico driver is not required.

The device works with an operating system, browser, or application that supports FIDO standards.

Before using biometric authentication, you must configure your FIDO2 PIN and then enroll at least one fingerprint.

Yubico Authenticator – Recommended

The Yubico Authenticator for Desktop app allows you to:
Set or change your FIDO2 PIN
Enroll fingerprints
Save up to 5 fingerprint templates
Rename saved fingerprints
Delete saved fingerprints
Manage hardware passkeys/FIDO2 credentials
Reset the FIDO2 app

Yubico Authenticator for Desktop is available for:
Windows
macOS
Linux

Yubico Authenticator Desktop 5.1 or later is required for fingerprint management.

Fingerprint Enrollment Without Yubico Authenticator

Windows 10 / Windows 11
Fingerprints can be enrolled using Windows system login options.

macOS
Enrollment possible using Chrome 90 or later.

Linux
Enrollment possible using Chrome 90 or later.

ChromeOS
Enrollment possible using Chrome 90 or later.

YubiKey Manager / ykman – optional.

This command-line tool can be used for advanced management of the device's FIDO2 functionality.

It is not required for standard user authentication.

Additional requirements for the Multi-protocol Edition

When using the YubiKey Bio Multi-protocol Edition with PIV/Smart Card functionality on Windows, the following is required:

YubiKey Smart Card Minidriver

System: Windows
Minimum version recommended by Yubico for Multi-protocol Edition support: 4.6.0 or later
Enables the use of YubiKey Bio biometrics in a PIV/Smart Card environment
Enables, among other things, the device to log in to Windows workstations

In corporate environments, the Multi-protocol Edition can also be deployed with the HYPR solution, enabling centralized credential registration and management.

Important information
The YubiKey Bio Series should not be considered a biometric version of the standard YubiKey 5 Series. It is a separate product family.
Standard YubiKey Bio FIDO Edition models support only FIDO protocols. They do not support PIV, OpenPGP, OATH-TOTP/HOTP, Yubico OTP, or Static Password.
If you require both biometric authentication and PIV/Smart Card functionality, the YubiKey Bio Series – Multi-protocol Edition should be used.
If you require protocols such as OpenPGP, OATH, Yubico OTP, or classic PIV without biometrics, the YubiKey 5 Series may be a better solution.

Manufacturer: Yubico AB
Production: Sweden, USA

Technical Specifications – YubiKey Bio FIDO Edition
Manufacturer: Yubico
European Manufacturer: Yubico AB
Series: YubiKey Bio Series
Version: FIDO Edition
Device Type: Biometric Hardware Security Key
User Authentication Method: Fingerprint or PIN
Fingerprint Reader: Yes
Maximum Number of Enrolled Fingerprint Templates: 5
Secure Element: Yes
FIDO2: Yes
WebAuthn: Yes
FIDO CTAP 2.1: Yes
FIDO U2F: Yes
FIDO2 Level 2: Yes
Hardware Passkeys: Yes
Number of FIDO2 Credentials/Passkeys: Up to 100
AAL3: Yes, if the environment does not require FIPS
PIV / Smart Card: No
OpenPGP: No
OATH-TOTP: No
OATH-HOTP: No
Yubico OTP: no
Challenge Response: no
Static Password: no
USB device type: FIDO HID
HID Keyboard: no
CCID Smart Card: no
USB: USB 2.0
Data transfer: up to 12 Mb/s
NFC: no
Lightning: no
Power consumption: less than 150 mW
Battery: no
Network connection required by the key: no
Water and dust resistance: IP68
Crush resistance: up to 25 N m
Declared durability of the USB connector: over 100,000 cycles
Declared number of write/erase cycles: over 500,000
Operating temperature: 0°C to 40°C
Storage temperature: -20°C to 85°C
Current firmware of the offered models: 5.8
Hardware compatibility: incl. CE, UKCA, FCC, RoHS
ECC algorithms for FIDO2: P-256, P-384
Supported environments: Windows, macOS, ChromeOS, Linux, and compatible browsers and applications that support FIDO2/WebAuthn