HID vs Yubico

About Yubico

Yubico offers the YubiKey, a phishing-resistant, FIPS 140-3 validated key for multi-factor and passwordless authentication. The multi-protocol YubiKey protects access to computers, networks, and online services. A YubiKey connects through any USB port or NFC reader with no software to install. The YubiKey works with Windows and Mac login, Gmail, Dropbox, Facebook, Salesforce, Duo and other services.^[1][6][7]

The YubiKey 5 Series uses multi-protocol capabilities that can secure legacy and modern systems. The YubiKey 5 Series supports authentication protocols including FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP, OATH-HOTP, Smart card (PIV) and OpenPGP. The YubiKey 5C NFC provides tap-and-go authentication on NFC-enabled Android and iOS devices. The YubiKey 5C NFC is supported by Google and Microsoft accounts and password managers, and works with Windows, macOS, ChromeOS and Linux. The YubiKey 5C is built with glass-fiber reinforced plastic, is IP68 rated for water and dust, is crush resistant and has no batteries or moving parts. YubiKey Nano form factors stay in the device USB port and are tapped to authenticate. With firmware 5.8, YubiKeys enable preview support for hardware-backed signatures and security for digital identity wallets, payments and AI-driven workflows.^{[7][8][9][10][13]}

The YubiKey 5 FIPS certified security keys meet the AAL3 level of assurance of the NIST SP800-63B guidelines. The YubiKey 5C Nano FIPS connects to a device via USB-C, and its nano form factor is designed to stay in the device. The YubiKey 5C Nano FIPS is FIPS 140-3 validated for government and regulated organizations, at Overall Level 2 and Physical Security Level 3. YubiKey Bio Series supports biometric authentication using fingerprint recognition for passwordless logins. YubiKey Bio Series stores fingerprint templates in the secure element on the key.^[7][12]

The Security Key Series by Yubico delivers FIDO-only security keys for both consumers and enterprises. The Security Key Series supports only the FIDO2/WebAuthn and FIDO U2F authentication protocols. The Security Key Series combines hardware-based authentication with public key cryptography for use across desktops, laptops and mobile. Organizations can integrate support for the Security Key Series within their systems and applications that support FIDO, including mobile-restricted or shared workstation environments. Security Key Series keys for enterprises work with Google Workspace, Microsoft 365, IAM platforms, password managers and social media applications. Serial numbering on the back of the enterprise Security Key Series keys lets enterprises track distribution and usage. The enterprise-ready Security Key Series keys are available exclusively as part of YubiKey as a Service.^[7][13]

YubiKey as a Service is a subscription for organizations. Twitter turned to YubiEnterprise Delivery and YubiEnterprise Subscription services to distribute YubiKeys across its global workforce. The Yubico Authenticator app lets users store credentials on a YubiKey and not on a mobile phone. The Yubico Authenticator app can generate codes for logging into services. A range of computer login choices is available for organizations and individuals to secure Windows or Macs with strong authentication.^[7][8][10]

The YubiHSM 2 is a hardware solution for protecting Certificate Authority root keys from being copied by attackers, malware and malicious insiders. YubiHSM 2 secures cryptographic keys through their entire lifecycle, from key generation, attestation, storage, distribution and backup to destruction if needed. With the YubiHSM 2, keys are created, imported and stored, and all crypto operations run in the YubiHSM 2 hardware to prevent theft of keys at rest or in use. All cryptographic keys and other objects in the YubiHSM 2 belong to one or more security domains. The YubiHSM 2 features are accessible through an open source software development toolkit (SDK). YubiHSM 2 interfaces via YubiHSM KSP, PKCS#11, and native libraries. YubiHSM 2 can provide hardware backed keys for a Microsoft-based PKI implementation. YubiHSM 2 v2.4 allows secure data backups using asymmetric encryption. The Bring Your Own Key (BYOK) feature in YubiHSM 2 v2.4 lets organizations manage and store their own encryption keys in a multi-cloud environment. The YubiKey secures the software supply chain and 3rd party access with phishing-resistant MFA, and the YubiHSM secures the hardware supply chain by ensuring product part integrity.^[6][14]

Customers in over 160 countries protect their accounts with the YubiKey. OpenAI makes YubiKeys a standard part of how it protects its employees. Hyatt is deploying YubiKeys to get rid of passwords in its environment. Yubico offers a DOW approved hardware security key. YubiKeys are widely deployed in the US Government with over 150 unique implementations including US Army, US Navy, US Air Force, US Marine Corps, US Space Force, DOW Missile Defense Agency and more. Yubico offers DOD approved, FIPS 140-3 validated multi-factor authentication for non PIV/CAC eligible workers, mobile and BYOAD/BYOD users, air-gapped or closed networks, privileged users and remote workers. Yubico helps secure access to election infrastructures including voter registration databases, election management and reporting systems, and e-pollbooks. YubiKeys are securely manufactured in Sweden and programmed in the USA. Yubico matches up to 5% of the number of YubiKeys purchased on Yubico.com, donating them to non-profit organizations, election campaigns, journalists and humanitarian workers.^{[4][6][8][10]}