Hardware security keys
The keys that replace SMS codes, sold by the people who deploy them.
Buy the hardware and take it from there, or have us run the staff rollout. Microsoft retires SMS and voice sign-in on 1 February 2027, so most teams are moving now.
- Advice on which key fits we say when the cheaper one is the right answer
- We run the staff rollout enrolment, Conditional Access, break-glass accounts
- Genuine stock, local warranty authorised Yubico reseller, posted from Sydney
Not sure which one?
Which key do I need?
Three questions, the same ones we ask clients before a rollout.
Mixed fleet, or more than a handful of staff? We size the order to each role.
The range
All products
Security Key NFC by Yubico
$49.95USB-A · NFC · Firmware 5.7
The USB-A entry key. FIDO2 and WebAuthn over USB-A and NFC, for older desk fleets being moved off SMS codes at scale.
YubiKey 5C NFC
$99.95USB-C · NFC · Firmware 5.7
USB-C and NFC in one key. The default choice for a modern laptop and phone combination, and the one we hand most clients.
YubiKey 5 NFC
$99.95USB-A · NFC · Firmware 5.7
The USB-A version of the 5C NFC. Same protocols, same NFC, older port. Still the right answer for a lot of Australian desk fleets.
YubiKey 5C
$109USB-C · no NFC
USB-C without NFC. The right pick only if you never authenticate on a phone, or your policy rules NFC out.
YubiKey 5 Nano
$116.95USB-A · no NFC · Firmware 5.7
The USB-A Nano. Sits flush in a desktop port and stays there, for machines that never move and rarely change hands.
YubiKey 5Ci
$145.95USB-C + Lightning · no NFC · Firmware 5.7
USB-C on one end, Lightning on the other. The answer for fleets still on Lightning iPhones, now that current models use USB-C.
Why buy here
A reseller can tell you the spec. We can tell you what breaks.
IronSights is a managed security practice in Sydney. The engineers writing these product pages are the same ones enrolling keys, writing Conditional Access policies and cleaning up after the break-glass account nobody documented. That is why the pages tell you when the cheaper key is the right answer, and when a key is not what you need at all.
Buy the hardware and take it from there, or have us run the rollout. Both are fine. Nobody gets chased.
How a rollout works