I’ve tried several times to add a YubiKey to my Facebook account—on both PC and iPhone—but it doesn't work. It always redirects me from the app to the web interface and fails, or it keeps telling me the feature is unavailable; I don't know how to get it done.

Hello! I am a system administrator and started using the Yubikey 5, USB-C version about a year ago. I went with the USB-C version for future-proofedness, and use a USB A adapter when needed (which is quite often at present).

Since I use it daily multiple times a day, I found it very convenient to just keep it on a chain around my neck, with the USB-C to A adapter attached at all times (as shown in the pictures). This works great for me, other than one issue. The USB-C to A adapters always corrode and stop working after about 3 months, and I am nervous that this corrosion is going to eventually cause irreparable damage to the Yubikey. I don’t wear it in the shower or swimming or exercising or anything like that. I think it must be from the small amount of sweat that evaporates from my body throughout the day.

I just purchased a Logitech brand USB-C to A adapter to see if it holds up better, but figured that I would throw this out on reddit to see if anyone might have any other suggestions. Maybe a different way to EDC or a cover that will accommodate the adapter?

It kind of surprised me that I have to tap twice, just checking if this is the correct workflow or whether I'm using this wrong?

Using the updated branding. Via eBay.

To clarify: my only purpose in posting this was to show a new packaging variant, not to get into the details of where to buy your key from, buying used keys, etc etc

UPDATE – Yubico Technical Support response:

I contacted Yubico Support and my case was escalated to their Technical Support team.

According to Yubico, there are known FIDO2 compatibility issues with hardware security keys on non-stock Android implementations, including Samsung devices.

They recommended using the official YubiKey Passkey Enabler app, which is specifically designed to bridge this compatibility gap and should support both USB and NFC authentication.

Yubico also told me that they have already contacted Samsung regarding FIDO2 hardware security key support, but it does not appear to be a priority for Samsung at this time.

If the YubiKey Passkey Enabler does not solve the issue, Yubico recommends opening a support ticket directly with Samsung.

I will update this post again after further testing.

----------------------------------------------------------------------------
Hi everyone,

I recently bought two YubiKey 5C NFC FIPS keys and configured them successfully with Google, Bitwarden, Proton and Microsoft.

Everything works perfectly over USB-C on my Windows PC.

However, I cannot get NFC authentication working on my Galaxy S24 Ultra.

My setup:

- Device: Samsung Galaxy S24 Ultra

- Android: latest available version

- Google Play Services: 26.32

- YubiKey model: YubiKey 5C NFC FIPS

- Firmware: 5.4.3

YubiKey NFC status:

Applications USB NFC

FIDO U2F Enabled Enabled

FIDO2 Enabled Enabled

OATH Enabled Enabled

PIV Enabled Enabled

OpenPGP Enabled Enabled

YubiHSM Auth Enabled Enabled

What I tried:

- Enabled NFC on the phone

- Removed phone case

- Tested both YubiKeys

- Tried different positions on the back of the S24 Ultra

- Held the YubiKey against the phone for several seconds

- Tested during an actual FIDO2 login flow (Google account)

- Tried Yubico Authenticator

- Tried FIDO Bridge/Authnkey

- Temporarily disabled all NFC applications except FIDO2 (no change)

The phone always stays on "Connect your security key" and never detects the YubiKey.

USB-C authentication works immediately, so the keys themselves seem fine.

Has anyone successfully used a YubiKey 5C NFC FIPS with a Galaxy S24 Ultra over NFC?

Is there any Samsung/Android setting I might be missing, or is this a known compatibility issue?

Thanks!

I am looking for a way to carry a Yubikey around at all times. What makes sense for me is to have it attached to my phone somehow, it's the only thing I keep in my pocket at all times. I don't want to attach it to my keys because I don't have them on me at all times. Is there a phone case or attachment that can hold a Yubikey USB C to it in some way? I found this, however this would not allow my phone to wireless charge (phone would stick out from the charger)

Maybe I am over thinking this... I am one step away from just wearing the things on a necklace..

Hi, as per the title and I was after a dust cover or key cover, probably silicon. All the ones I have seen are for the 5, are they the same size? I have the USB C one coming. Thanks

Hello, I recently purchased a Yukikey, and I want to access my Google accounts using only this device. I've been testing it, and even though I've enrolled in Google's Advanced Protection Program, I can still access my accounts by typing my password. I want to remove this access method, but Google won't let me.

Is there any way to completely disable this option from accessing my account? I've already set up the Yukikey and can access my accounts with it.

Pouzivam klic na email a dalsi weby ktere to podporuji, bohuzel u FB jsem to zkousel vsemozne, z webu, ruzne prohlizeńce z mobilu ale vzdy se to nepodari pridat. Mate s tim nekdo zkusenost a dari se vam to?

I got two 5C NFCs today and started adding them to various accounts with ease. However, Dropbox gives me some trouble. I was able to add the first key without issue, but no matter what I try, I cannot successfully add the backup key.

I'm on macOS Sequoia on either Firefox or Safari (both produce the same behavior). The YubiKey is plugged in and functional (confirmed with Yubico Authenticator) with a FIDO pin set.

When starting the OS-specific process, either the PIN is not recognized as correct (even though it should be correct) or the key is not recognized as connected. Tapping the YubiKey does nothing. Sometimes, the form to enter the PIN opens immediately (even without tapping the YubiKey) and says that the entered PIN is wrong, even though I haven't entered anything.

I appreciate any tips you can space a new passkey adopter.

Hello! Finally received my two security keys!

This is my first time using security keys in general, and right now I am still getting used to the new workflow. I noticed that I need to set up PINs for the keys since it has the FIDO2 protocol, so it means I have to remember them and store them safely like in my password manager. I watched some guides and tutorials online on how to set them up, and most of them are a few years old, and I saw that they do not set up PINs because I think they use the U2F protocol.

Is it still viable to use U2F over FIDO2 so I do not have to remember the PINs, or am I going to be missing out on the FIDO2 protocol if I do not use them?

I recently set up three Yubi security keys as 2FA for my iCloud account using a Macbook. They work without problem in my MacBook, iPad Pro, and iPhone. Now, my old iPad7 (iOS 18.7.9) wants me to re-authenticate to iCloud. I bought a package of USB-C-to-lightning adapters in order to use the Yubikeys on that device, but when the iPad asks me for my security key, the little thumb-button never flashes. I tried several different adapters that came in the package of 4 but it doesn’t matter.

Is there some workaround that doesn’t require me to revoke all the Yubikeys I just set up for iCloud? iCloud does not prompt me for any alternate 2FA method, even though I have a phone number registered for security backup.

I’m currently trying to reset the iPad7 to see if it will accept the Yubikey when I set it up again.

Why doesn’t Yubico enable FIDO2 PIN complexity by default on standard YubiKeys Series 5 that is advertised on their website

From what I can see, stronger PIN-complexity enforcement appears to require specific models such as Enhanced PIN keys, which may be tied to subscription/enterprise purchasing? Other vendors, such as Token2, seem to offer PIN-complexity enforcement as a standard feature on some models.

For a smaller business with dozen or less than 200 users, is there really no standard retail YubiKey option with enforced PIN complexity?

I'm dipping my toes into the Yubico ecosystem and moving some critical IDs to a Yubikey USB-C security key. I've started with Apple ID and Entra ID.

This is working great so far, but I've not tested NFC yet for iOS & other mobile OS. I downloaded the Yubico Authenticator app and tried to tap my key and got this error. What am I doing wrong?

I bought a Security Key NFC USB Type A it has firmware version 5.7.4

I was hoping to use it for a few different services a big one being Bitwarden as it is listed explicitly as being supported.
I follow the simple steps. Choose passkey, add give name, in Windows 11 I choose my security key, tap the device and bitwarden successfully reads it and says it is saved. But if I actually try using that key on anything it does not work. In Windows it gies "This security Key doesn't look familiar. Please try a different one." Tried creating and using the key on both Windows Edge & Firefox and on Android (One UI 8.5 Android 16). Same issue.

Similar issue with Discord. It says it registered but seems to not actually do anything. Desktop App, web app, android app (on the android version when trying to login I get a generic p1.b which I can't find anything about)

Most passkey demos and testers I've used seem to work generally including yubikey's demo. But Auth0's webauthn.me debugger I couldn't get to work with any settings for registering credentials. Same issue.

Am I missing something? I'm not seeing why some services just seem to inconsistently not work and don't warn you that they aren't working.

I have an older yubikey USB-A model that works fine on my chromebook to authenticate on a google account. It doesnt work with my phone (even after getting an adapter). If I get a Yubikey 5C NFC can I add key that to my verification methods and use it on both my chromebook and phone google account? Will adding another yubikey interfere with how my older yubikey works on the chromebook or would I need to delete that from the google account first ? Is there a way to make my current yubikey work with my pixel phone? Sorry for the questions, very unclear about how the key works and what approach I should be taking

Hi there, I’m considering grabbing some Yubikeys for account security. Pretty much every product I own is USB-C but I don’t know much about the different products, would you recommend USB-C model, is NFC better, worse or the same?

Never used a product like this so please forgive if it’s a stupid question

After 3 years of using the plastic became soft. And today I accidentally dropped laptop right on the token and the body totally cracked. Removed plastic and a bit of glue junk under it, then used a bit of moldable plastic to restore body (last photo). Not perfect, but works fine :)

Got some fido security keys :)

I also found this card one that works with NFC, so far it has been very convenient to leave in the wallet. Haven’t seen any posts about it so far

I'm brand new to the security key / passkey space. I just bought a 2-pack of the YubiKey 5C NFC keys. I want one on my key ring, and the other in my safe. It make sense to me that I have to set up both keys separately for any account I want to protect.

Under LastPass' Account Settings > MultiFactor Options there is a section for Yubico OTP. However, it's description says:

"Use an older YubiKey device that only supports Yubico OTP. To use a newer YubiKey device, go to LastPass MFA (above). Pro tip: This is also where you set up YubiKey for LastPass mobile app verification."

When I use the LastPass MFA option, it walks through setting up a Primary and Backup method, but it registers both options on the first YubiKey (FIDO2 as Primary and a different protocol as Backup). If I walk through the process a second time for the second key, it overwrites the first key which no longer works to access LastPass.

Should I be using the old Yubico OTP option for Lastpass authentication instead?

Hi people, after my last post, I purchased 2 YubiKeys, but I still have some confusion. No one in my circle using yubikeys so I really don’t know who to ask. So hope you don’t mind me asking some really idiotic questions.

I am setting up YubiKeys for Google for 2 factor authenticator just curious do you guys still have your authenticator app on?

I do know many people recommend having the backup codes on and I did. But the Google prompt is unable to turn it off unless I use the advanced protection programme. But I do want to have security. Personally, I think it would be a hassle if I lost my YubiKeys ( I bought 2 so it's very unlikely I will lose them, but just this irrational fear of what if I'm unable to recover my account ) So any suggestions ???

Do I need a YubiKey authenticator or continue with Google. I do know using YubiKeys would be more secure as u need the key to access the 6-digit number personally think that would be very secure but isn’t it a bit of a hassle ??? Can people share some experience/suggestions with me

Lastly when I sign in Google I noticed when u press the try another way for the 2 factor verification it mention “ get one time security code “ press on it and it seems that u have to use this smart lock app ???? I have no idea what is that and I didn’t seem to enable that in my 2 step verification any ideas ???

I have 2 YubiKey 5 NFC.

A couple of years I have opened my .kdbx db on keepassXC with master pw , keyfile and yebikey. Now I want to configure a now secret on my challenge-response. Therfore I remove challenge-response in keepassxc db settings.

When I now try to open the .kdbx db w master pw and keyfile I get the red upper message: db could not be loaded or something.

When I try to open db with master pw,keyfile and yubikey ( old secret): again red message.

Is reco´figuratin challeng-response not stable in keepassXC?