Security keys
18 products, 12 in stock
Hardware security keys that replace SMS codes, shipped from Sydney with advice on which one actually fits your setup.
Security Key Series
The rollout key. FIDO2 and WebAuthn only, which is everything a Microsoft 365 or Google Workspace sign-in needs, at about half the price of a 5 Series. Start here unless something below says otherwise.
Security Key NFC by Yubico
$49.95USB-A · NFC · Firmware 5.7
The USB-A entry key. FIDO2 and WebAuthn over USB-A and NFC, for older desk fleets being moved off SMS codes at scale.
On back orderSecurity Key C NFC by Yubico
$49.95USB-C · NFC
USB-C and NFC for FIDO2 and WebAuthn sign-in, which is all a Microsoft 365 rollout actually needs. It leaves out the 5 Series' smart card, OTP and PGP.
YubiKey 5 Series
Adds smart card, OATH codes, OpenPGP and Yubico OTP on top of FIDO2. Worth the difference for admins, break-glass accounts and anyone whose password manager or VPN needs more than WebAuthn.
YubiKey 5C NFC
$99.95USB-C · NFC · Firmware 5.7
USB-C and NFC in one key. The default choice for a modern laptop and phone combination, and the one we hand most clients.
YubiKey 5 NFC
$99.95USB-A · NFC · Firmware 5.7
The USB-A version of the 5C NFC. Same protocols, same NFC, older port. Still the right answer for a lot of Australian desk fleets.
YubiKey 5C
$109USB-C · no NFC
USB-C without NFC. The right pick only if you never authenticate on a phone, or your policy rules NFC out.
YubiKey 5 Nano
$116.95USB-A · no NFC · Firmware 5.7
The USB-A Nano. Sits flush in a desktop port and stays there, for machines that never move and rarely change hands.
YubiKey 5Ci
$145.95USB-C + Lightning · no NFC · Firmware 5.7
USB-C on one end, Lightning on the other. The answer for fleets still on Lightning iPhones, now that current models use USB-C.
On back orderYubiKey 5C Nano
$115USB-C · no NFC
Sits flush in the port and stays there. Built for a machine that never moves, not for a person who does.
YubiKey Bio Series
A fingerprint instead of a PIN. FIDO2 and WebAuthn only, like the Security Key Series, so you are paying for the sensor rather than extra protocols. Built for shared desks where typing a PIN in the open is the problem.
YubiKey C Bio (FIDO Edition)
$169USB-C · no NFC
Fingerprint instead of a PIN, over USB-C. FIDO2 and WebAuthn only, so it does not carry the 5 Series' other protocols.
On back orderYubiKey Bio (FIDO Edition)
$169USB-A · no NFC
The USB-A fingerprint key. FIDO2 and WebAuthn only, for desks where a PIN typed in the open is the real problem.
YubiKey 5 FIPS 140-3 Series
The 5 Series in a NIST-validated build to FIPS 140-3, the current federal standard. This is the version to specify on new procurement: the older 140-2 generation is being retired. Registering a key voids change-of-mind returns.
YubiKey 5 NFC FIPS (140-3)
$150.95USB-A · NFC · Firmware 5.7
The FIPS 140-3 validated YubiKey 5 NFC: same USB-A and NFC hardware key as the standard model, with the certification regulated buyers need.
YubiKey 5 Nano FIPS (140-3)
$167.95USB-A · no NFC · Firmware 5.7
FIPS 140-3 validated YubiKey in a USB-A nano that stays in the port. The certification regulated and government buyers need.
YubiKey 5C FIPS (140-3)
$162.95USB-C · no NFC · Firmware 5.7
The FIPS 140-3 validated YubiKey 5C. Same multi-protocol key as the standard 5C, with the certification regulated and government buyers need.
YubiKey 5C Nano FIPS (140-3)
$167.95USB-C · no NFC · Firmware 5.7
The FIPS 140-3 validated YubiKey 5C Nano: a tiny USB-C security key for regulated and government buyers who need the certification on the paperwork.
On back orderYubiKey 5C NFC FIPS (140-3)
$150.95USB-C · NFC · Firmware 5.7
The FIPS 140-3 validated YubiKey with USB-C and NFC, for Australian buyers who need the certification on the paperwork.
On back orderYubiKey 5Ci FIPS (140-3)
$196.95USB-C + Lightning · no NFC · Firmware 5.7
A FIPS 140-3 validated security key with both USB-C and Lightning connectors, for regulated buyers still carrying an older iPhone or iPad.
YubiKey 5 FIPS 140-2 Series
The earlier FIPS validation, kept only where a control set still names 140-2 specifically. For anything new, choose the 140-3 series above. Registering a key voids change-of-mind returns.
YubiKey HSM
A hardware security module for servers, not a login key. It protects private keys — a certificate authority, code signing, database encryption — inside dedicated tamper-resistant hardware. Installed in a server, not carried on a keyring.
