Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified

I bought this for MFA authentication, and it has worked flawlessly. Authentication is fast and reliable, and the build quality feels solid. If you want a simple hardware security key that just works, this is a great choice.

There are other more exquisite models of Yubikeys (eg. Yubikey 5, Yubikey FIPS) along with different sizes of each model, however this basic Yubikey (Model) Security is all most people will ever need. The "Yubikey Security" includes basic FIDO/WebAuth, for verifying your identity with many popular Internet sites when using Two Factor Authentication (2FA). The "Yubikey 5" is more so for those (likely tech savy guys) using PGP/GNUPG on a daily basis, such as signing Emails or source code commits. Includes OpenPGP (GNUPG) and SSH key support, as well as some other exquisite authentication methods. Most documentation workflows mandate destructively moving/copying the keys to your (USB) security device token (Yubikey 5), with PGP/SSH keys are primarily contained on the security device token with only stub key files remaining on the computer. If you're a user simplifying your security routine rather than complicating your security workflow, probably not wise with the existing paranoid coded tools or workflow! The "Yubikey FIPS" is likely only for actively employed Government employees requiring Federal Information Processing standards (FIPS). Certainly, as of this date July 2024, does not include civilians logging into the basic Federal Internet sites for receiving benefits; and likely will never include civilians. FIDO/WebAuth is primarily used with external security device tokens, such as Yubikey. FIPS likely requires key extraction/copying from official Government keys, and likely requires the assistance of the system's administrator... a task not for the "faint of heart", even for seasons computer programmers. YUBIKEY SECURITY PROS 1) It is a larger key, unlike the nano sized USB keys, so users can visibly see their key is still attached and can remove the key when not in use. 2) Basic FIDO/FIDO2/WebAuth security, can greatly simplify most Internet sites using pain in the butt Two Factor Authentication. (eg. Google, ...) 3) More feasible $20-25 each, rather than greater than $50 for each for more exquisite Yubikey 5 models. 4) Key is in a form factor much smaller than the credit card sized security device tokens. CONS 1) If kicked, knocked or dropped, the larger keys can likely break or break USB ports. 2) Most banks still do not make use of external security device tokens (eg. FIDO2, WebAuth, ...), such as the Yubikey Security USB key. 3) Only one form factor, large basic and very visible. (eg. No nano sized USB keys for Yubikey Security.)

Side note - I use the open-source BitWarden password manager, which supports Yubikeys. BitWarden is free on multiple devices like PC, Mac, Linux, and your smartphone - for some of the bells and whistles like supporting a YubiKey you have to upgrade to their $10 a year plan, totally reasonable and you should support this company, they are great and my favorite password manager. Now - on to the Yubikey itself. One of the great selling points is that you cannot log on to services that support Yubikey (e.g. your bank, Facebook, Twitter, etc.) if you do not have physical possession of the Yubikey. If someone happened to obtain your User ID and password somehow, they still wouldn't be able to log in thanks to the Yubikey, so that is peace of mind. Speaking of peace of mind, do yourself a favor and buy 2 because you're going to want to store the backup key somewhere safe and easily accessible in case you ever lose your primary key. It is not technically necessary, but it would be an extra hassle to try and prove to the bank or other service that you are the actual client because you won't be able to log in without the key, so there is no easy password reset that you might be used to. Each company has different procedures if you have to call them if you lost your only Yubikey, for all they know you might be a leet hacker trying to social engineer them, so having the backup key gives peace of mind and you can avoid that problem if you are prone to losing things. In a digital world filled with passwords as long as the Great Wall and security measures more complicated than a Rubik's Cube, finding a solution that balances convenience and protection is a quest worthy of a tech-savvy knight. Enter the YubiKey 5 NFC – a pocket-sized guardian that brings a touch of magic to the realm of online security. At first glance, the YubiKey 5 NFC may seem like a humble USB stick, but beneath its unassuming exterior lies a treasure trove of security features that would make even the most paranoid IT guru grin like a Cheshire cat. With support for a myriad of authentication protocols, including FIDO U2F and FIDO2, OTP, PIV, and smart card, this little key unlocks a world of possibilities for safeguarding your digital kingdom. But what truly sets the YubiKey 5 NFC apart from its peers is its Near Field Communication (NFC) capabilities. With a wave of your hand (or a tap of your phone), you can seamlessly authenticate with your YubiKey using compatible mobile devices, turning your smartphone into a digital Excalibur that vanquishes would-be hackers with ease. Setting up the YubiKey 5 NFC is as simple as pie – even for those whose tech skills are as rusty as an ancient server rack. Just plug it into a USB port or tap it against your NFC-enabled device, follow the prompts to register it with your accounts, and voila! You're one step closer to digital invincibility. The YubiKey 5 NFC is a game-changer in the world of online security – a trusty sidekick for the modern-day digital hero. So, whether you're a code-slinging developer, a data-wrangling sysadmin, or just someone who wants to keep their online accounts safe and sound, the YubiKey 5 NFC is here to save the day (and your passwords). Final note - regular 2FA (two-factor authentication) of the type that sends you a text message with a ~6-digit code can be compromised by "SIM jacking" i.e. a hacker calls and socially engineers your cell phone plan provider like T-Mobile, AT&T, etc., and convinces them that the hacker is you, and you want to transfer your cell service to a new SIM card because you lost yours. The cell providers don't always do a great job in this situation and have been known to transfer your account to the hacker and their SIM card. I guess you would have to be a high-value target for something like this to happen, but it's good to know that the Yubikey protects you from this type of attack and has your back.

To be online these days is akin to walking across an open field which is filled with "rabbit holes" and "land minds." I have fallen into countless rabbit holes trying to gather information to protect myself. Fortunately, I have not been blown up by some malicious actor with malicious products. It is truly imperative for everyone, esp. non-geeks, to learn the basics of how to protect one's privacy and data as best one can. I learned about passkeys. They are portable and slimmer than a flash drive. They are available in USB-A and USB-C, making them compatible with desktop, laptop and phone. It makes signing into web sites so much easier to use 4 digits vs. passwords, text messages, emails, etc. Because it is encrypted, signing into a web site is more secure. I bought one Yubico Security Key NFC and use it on my laptop and desktop. Now, I wish that all web sites would be set up to use a security key. It is well worth the small $ investment.

Bought this from a presentation on YouTube about this product and really wanted to like it. It was confusing as all get out to setup and even following the on-line instructions it wouldn't work properly. Eventually, I had to contact Yubikey's Support who then sent me a link for Google to get my key setup and I am still able to bypass it on my system. I followed their (Yubikey) instructions to the letter and was very disappointed in the end. I get what it's suppose to do but it doesn't work as described (at least in my experience). I already had Google's highest degree of privacy settings turned on when I went in to set it up but had to turn them off in order for the key to even be recognized. Had I known that it would have saved me at least some frustration. Maybe part of it is my own ignorance but I'm not at all impressed with this product. I wound up buying 4 of this specific type of key (there are many different types which adds to to confusion) with the intent of giving them out as Christmas gifts but after my experience of trying to setting it up, I'm not really sure I want to do that to anyone. Maybe it's the type of key I bought also? I don't really know at this point but in good conscience I can't recommend this product, and I really did want to like it for what I thought it was capable of doing. The idea is excellent but the implementation (in my opinion) is awful at best. Trying to add additional accounts to it is just as frustrating as it was to simply set it up also. Sorry to Yubikey but this was a definite no for my Christmas list! Even after setup I'm not even sure it actually works.

This a a great solution and works as it should.

It works. Not all firms use FIDO2 authentication. Keep in mind that hackers can bypass FIDO by using a fallback mechanism.

Everyone should have a passkey actually everyone should have two. Two. I'm glad the technology is kept up with this advancement. It makes life so much easier

Un dispositivo imprescindible si para tu es importante la seguridad, la uso con mis cuentas de Google, protonmail y hasta el momento todo bien

Good and practical product

I really like this security key! It is incredibly easy to use, and I haven't had any problems with it at all. Everything works perfectly. I also really appreciate that it is "Programmed in Sweden and USA," as stated on the back of the product box. It gives me extra peace of mind regarding the quality and security of the device. Highly recommended if you want to secure your accounts without any hassle! 10/10.

PRODOTTO FUNZIONALE E MOLTO SEMPLICE IL FUNZIONAMENTO LO CONSIGLIO FUNZIONA BENE

o fidokey e muito boa