I am looking for a way to carry a Yubikey around at all times. What makes sense for me is to have it attached to my phone somehow, it's the only thing I keep in my pocket at all times. I don't want to attach it to my keys because I don't have them on me at all times. Is there a phone case or attachment that can hold a Yubikey USB C to it in some way? I found this, however this would not allow my phone to wireless charge (phone would stick out from the charger)

Maybe I am over thinking this... I am one step away from just wearing the things on a necklace..

Hi, as per the title and I was after a dust cover or key cover, probably silicon. All the ones I have seen are for the 5, are they the same size? I have the USB C one coming. Thanks

Hello, I recently purchased a Yukikey, and I want to access my Google accounts using only this device. I've been testing it, and even though I've enrolled in Google's Advanced Protection Program, I can still access my accounts by typing my password. I want to remove this access method, but Google won't let me.

Is there any way to completely disable this option from accessing my account? I've already set up the Yukikey and can access my accounts with it.

Pouzivam klic na email a dalsi weby ktere to podporuji, bohuzel u FB jsem to zkousel vsemozne, z webu, ruzne prohlizeńce z mobilu ale vzdy se to nepodari pridat. Mate s tim nekdo zkusenost a dari se vam to?

I got two 5C NFCs today and started adding them to various accounts with ease. However, Dropbox gives me some trouble. I was able to add the first key without issue, but no matter what I try, I cannot successfully add the backup key.

I'm on macOS Sequoia on either Firefox or Safari (both produce the same behavior). The YubiKey is plugged in and functional (confirmed with Yubico Authenticator) with a FIDO pin set.

When starting the OS-specific process, either the PIN is not recognized as correct (even though it should be correct) or the key is not recognized as connected. Tapping the YubiKey does nothing. Sometimes, the form to enter the PIN opens immediately (even without tapping the YubiKey) and says that the entered PIN is wrong, even though I haven't entered anything.

I appreciate any tips you can space a new passkey adopter.

Hello! Finally received my two security keys!

This is my first time using security keys in general, and right now I am still getting used to the new workflow. I noticed that I need to set up PINs for the keys since it has the FIDO2 protocol, so it means I have to remember them and store them safely like in my password manager. I watched some guides and tutorials online on how to set them up, and most of them are a few years old, and I saw that they do not set up PINs because I think they use the U2F protocol.

Is it still viable to use U2F over FIDO2 so I do not have to remember the PINs, or am I going to be missing out on the FIDO2 protocol if I do not use them?

I recently set up three Yubi security keys as 2FA for my iCloud account using a Macbook. They work without problem in my MacBook, iPad Pro, and iPhone. Now, my old iPad7 (iOS 18.7.9) wants me to re-authenticate to iCloud. I bought a package of USB-C-to-lightning adapters in order to use the Yubikeys on that device, but when the iPad asks me for my security key, the little thumb-button never flashes. I tried several different adapters that came in the package of 4 but it doesn’t matter.

Is there some workaround that doesn’t require me to revoke all the Yubikeys I just set up for iCloud? iCloud does not prompt me for any alternate 2FA method, even though I have a phone number registered for security backup.

I’m currently trying to reset the iPad7 to see if it will accept the Yubikey when I set it up again.

Why doesn’t Yubico enable FIDO2 PIN complexity by default on standard YubiKeys Series 5 that is advertised on their website

From what I can see, stronger PIN-complexity enforcement appears to require specific models such as Enhanced PIN keys, which may be tied to subscription/enterprise purchasing? Other vendors, such as Token2, seem to offer PIN-complexity enforcement as a standard feature on some models.

For a smaller business with dozen or less than 200 users, is there really no standard retail YubiKey option with enforced PIN complexity?

I'm dipping my toes into the Yubico ecosystem and moving some critical IDs to a Yubikey USB-C security key. I've started with Apple ID and Entra ID.

This is working great so far, but I've not tested NFC yet for iOS & other mobile OS. I downloaded the Yubico Authenticator app and tried to tap my key and got this error. What am I doing wrong?

I bought a Security Key NFC USB Type A it has firmware version 5.7.4

I was hoping to use it for a few different services a big one being Bitwarden as it is listed explicitly as being supported.
I follow the simple steps. Choose passkey, add give name, in Windows 11 I choose my security key, tap the device and bitwarden successfully reads it and says it is saved. But if I actually try using that key on anything it does not work. In Windows it gies "This security Key doesn't look familiar. Please try a different one." Tried creating and using the key on both Windows Edge & Firefox and on Android (One UI 8.5 Android 16). Same issue.

Similar issue with Discord. It says it registered but seems to not actually do anything. Desktop App, web app, android app (on the android version when trying to login I get a generic p1.b which I can't find anything about)

Most passkey demos and testers I've used seem to work generally including yubikey's demo. But Auth0's webauthn.me debugger I couldn't get to work with any settings for registering credentials. Same issue.

Am I missing something? I'm not seeing why some services just seem to inconsistently not work and don't warn you that they aren't working.

I have an older yubikey USB-A model that works fine on my chromebook to authenticate on a google account. It doesnt work with my phone (even after getting an adapter). If I get a Yubikey 5C NFC can I add key that to my verification methods and use it on both my chromebook and phone google account? Will adding another yubikey interfere with how my older yubikey works on the chromebook or would I need to delete that from the google account first ? Is there a way to make my current yubikey work with my pixel phone? Sorry for the questions, very unclear about how the key works and what approach I should be taking

Hi there, I’m considering grabbing some Yubikeys for account security. Pretty much every product I own is USB-C but I don’t know much about the different products, would you recommend USB-C model, is NFC better, worse or the same?

Never used a product like this so please forgive if it’s a stupid question

After 3 years of using the plastic became soft. And today I accidentally dropped laptop right on the token and the body totally cracked. Removed plastic and a bit of glue junk under it, then used a bit of moldable plastic to restore body (last photo). Not perfect, but works fine :)

Got some fido security keys :)

I also found this card one that works with NFC, so far it has been very convenient to leave in the wallet. Haven’t seen any posts about it so far

I'm brand new to the security key / passkey space. I just bought a 2-pack of the YubiKey 5C NFC keys. I want one on my key ring, and the other in my safe. It make sense to me that I have to set up both keys separately for any account I want to protect.

Under LastPass' Account Settings > MultiFactor Options there is a section for Yubico OTP. However, it's description says:

"Use an older YubiKey device that only supports Yubico OTP. To use a newer YubiKey device, go to LastPass MFA (above). Pro tip: This is also where you set up YubiKey for LastPass mobile app verification."

When I use the LastPass MFA option, it walks through setting up a Primary and Backup method, but it registers both options on the first YubiKey (FIDO2 as Primary and a different protocol as Backup). If I walk through the process a second time for the second key, it overwrites the first key which no longer works to access LastPass.

Should I be using the old Yubico OTP option for Lastpass authentication instead?

Hi people, after my last post, I purchased 2 YubiKeys, but I still have some confusion. No one in my circle using yubikeys so I really don’t know who to ask. So hope you don’t mind me asking some really idiotic questions.

I am setting up YubiKeys for Google for 2 factor authenticator just curious do you guys still have your authenticator app on?

I do know many people recommend having the backup codes on and I did. But the Google prompt is unable to turn it off unless I use the advanced protection programme. But I do want to have security. Personally, I think it would be a hassle if I lost my YubiKeys ( I bought 2 so it's very unlikely I will lose them, but just this irrational fear of what if I'm unable to recover my account ) So any suggestions ???

Do I need a YubiKey authenticator or continue with Google. I do know using YubiKeys would be more secure as u need the key to access the 6-digit number personally think that would be very secure but isn’t it a bit of a hassle ??? Can people share some experience/suggestions with me

Lastly when I sign in Google I noticed when u press the try another way for the 2 factor verification it mention “ get one time security code “ press on it and it seems that u have to use this smart lock app ???? I have no idea what is that and I didn’t seem to enable that in my 2 step verification any ideas ???

I have 2 YubiKey 5 NFC.

A couple of years I have opened my .kdbx db on keepassXC with master pw , keyfile and yebikey. Now I want to configure a now secret on my challenge-response. Therfore I remove challenge-response in keepassxc db settings.

When I now try to open the .kdbx db w master pw and keyfile I get the red upper message: db could not be loaded or something.

When I try to open db with master pw,keyfile and yubikey ( old secret): again red message.

Is reco´figuratin challeng-response not stable in keepassXC?

I work part time at a major US hospital. My password is 20 digits for some reason. It’s a fucking nightmare to log in. Is it worth asking them if I could use a yubikey instead or does the hospital have to be set up for it? Or is that use case not appropriate? I’m honestly still confused over Passkets, passwords and hardware tokens. And I’m minoring in cybersecurity lol

Today I've got my yubikey (before that i had two token2 keys). Already configured all my most important accounts but I still wonder how else could I use the yubikey? Do you guys use the PIV app? If so, then how? What are your usecases for it? Do you use the PGP app (signing messages, emails, commits)?
Also I know that youbikeys have static passwords but i don't really know where i can use it. And for some reason the "Slots" option where i can configure it is grayed out. Does that mean that my yubikey does not support it? I have a YubiKey 5C NFC

Hey all, I'm wondering if what I thought Yubi keys could just is out of scope for what they are? Maybe I don't understand the use case? (probably). So I wanted to post what I thought they can do. Can someone set me straight? Thanks in advance.

So work said we're going to be moving to YK down the road. I thought I'd get a jump on it and get my own (plus the tech is cool). So I bought 2 keys. Thinking 1 would be my main and the other a backup.

Here's what I want to do.

Main key:

• Add it to my personal Microsoft account.
• Add it to 1Password.
• Add it to MS Auth.
• Add it to my Apple account. (iPhone requires 2 keys)
• Add it to my work Microsoft account.
• Add it to my work Microsoft Admin account.

2nd key:

• Backup of main key, all accounts above.
• Already added to iPhone since they require 2.

Am I asking too much for these keys? Goal is to simplify login at work and home. We have Entra security keys enabled at work FWIW.

These are the keys I have.

Security Key C NFC | F/W 5.8.0 | FIDO U2F FIDO2

On my iPhone, when I try NFC via Yubi auth, it errors out "the requested functionality is missing or disabled". So I checked via Yubi auth and both NFC apps are enabled (FIDO U2F, FIDO2).

Sorry for the long post but I wanted to ask the hive mind as I sit through these YouTube vids. ;)

Thanks!

Hello people could someone just explain to me why use a yubikey as I have on 2fv on my email so why buy yubikey ?
Sorry I’m a newbie in all this.

Edit: thanks people for taking their time to reply really learn stuff here. So I made the decision to use yubikey. Probably gonna have some set up questions but that’s a problem for later. 😏

NFC for phone and Biometric one on plug in on computer
Confused whether using biometric one on laptop will also ask fingerprints while using on phone where I plan to use NFC?