There are three places a YubiKey can come from in Australia: Yubico's own online store, which ships from overseas in US dollars; an authorised reseller, which holds genuine stock locally and sells in Australian dollars with GST and a tax invoice; and a marketplace listing, which may be either of those or a parallel import with no Australian warranty behind it. IronSights is an authorised Yubico reseller holding stock in Sydney. This guide explains what that means and what to check wherever you buy.
Yubico direct
Yubico sells from its own store, priced in US dollars and shipped internationally. It is the genuine article, and for a single key it is a reasonable option if you are happy to wait and to pay the exchange rate and international shipping on top of the sticker price. What it does not give you is an Australian tax invoice, GST handled for you, local stock for a same-week rollout, or anyone in the same time zone to tell you which model actually fits your setup.
Authorised resellers
An authorised reseller buys through Yubico's channel and sells genuine, current-firmware stock with the manufacturer's warranty intact. In Australia that means AUD pricing with GST included, a tax invoice for your accounts, domestic shipping, and returns handled locally. Yubico publishes a list of its authorised partners; if a seller is not on it, treat the claim with caution.
We became a reseller because of what arrived when we did not supply the keys ourselves: clients would take our specification to a marketplace and the hardware that turned up weeks later was frequently the wrong connector, a FIDO-only model where the 5 Series was required, or a parallel import with no Australian warranty. Supplying the keys removed that step. The reasoning is in why we partnered with Yubico.
Marketplaces and grey imports
A marketplace listing can be a reseller's own storefront or a third party reselling stock bought overseas. The second kind is a parallel import. The key may be genuine, but the warranty is not Australian, the firmware may be an older revision, and the seller usually cannot tell you which. For a personal key that is a gamble you might take. For a business rollout it is not, because the cost of one wrong batch is a second rollout.
What to check before you order
The connector and NFC
USB-A or USB-C, and whether you need NFC to sign in on a phone. The models with NFC cost the same as or less than the ones without, so the only reason to skip NFC is that you are certain you will never authenticate on a phone. Our guide to which YubiKey 5 you need walks through the port and phone questions.
FIDO-only or full 5 Series
The Security Key Series does FIDO2 and WebAuthn, which is everything a Microsoft 365 or Google Workspace sign-in needs, and nothing more. The 5 Series adds smart card, OATH codes, OpenPGP and Yubico OTP for admins, password managers, VPNs and SSH. Buying the wrong tier is the most common mistake we see on marketplace orders.
Firmware
Current models ship with firmware 5.7. The firmware on a YubiKey cannot be updated after manufacture, so an older key from old stock stays on its older firmware for life. A reseller with turnover can tell you the firmware of what they are shipping; a listing that cannot is a sign of old or grey stock.
FIPS validation
If a contract or a control set names FIPS, specify the 140-3 series. The older 140-2 generation is being retired and is kept in stock only for obligations that name it specifically. Registering a FIPS key voids change-of-mind returns, so confirm the validation you need before ordering rather than after.
Two keys per person
Every account should have a backup key registered. Budget for it at purchase rather than after the first lost key. The maths is in how many keys a business needs and the reasoning in the two-key rule.
Buying for a business
A business order needs three things a personal order does not: a tax invoice with GST itemised, the ability to buy on account or purchase order rather than a card, and enough stock to enrol a team in one sitting rather than in dribs as parcels arrive. Ask a reseller for all three before you commit, and ask what happens to a key that arrives faulty or turns out to be the wrong model, because the answer tells you whether you are dealing with a reseller or a listing.
Current AUD prices for every model we stock, GST included, are in YubiKey prices in Australia.
Frequently asked questions
Who sells YubiKeys in Australia?
Yubico direct from overseas, Yubico's authorised Australian resellers, and marketplace sellers of varying provenance. IronSights is an authorised reseller with stock in Sydney. Check any other seller against Yubico's published partner list.
Is there a Yubico distributor in Australia?
Yubico supplies Australian resellers through its channel program. As a buyer you deal with a reseller, not the distributor, and the thing to verify is that the reseller is authorised.
Are YubiKeys from Amazon or eBay genuine?
Often, but not reliably, and the warranty and firmware are the problem rather than authenticity. A listing that cannot state the firmware version and does not offer an Australian tax invoice is best treated as a grey import.
Do YubiKeys bought overseas work in Australia?
Yes. The hardware is identical worldwide. The differences are warranty, tax treatment and shipping, not function.
Can a business buy on purchase order?
Ask the reseller. It is one of the three things that separate a business supplier from a listing, along with a GST tax invoice and local stock for a team rollout.