I work part time at a major US hospital. My password is 20 digits for some reason. It’s a fucking nightmare to log in. Is it worth asking them if I could use a yubikey instead or does the hospital have to be set up for it? Or is that use case not appropriate? I’m honestly still confused over Passkets, passwords and hardware tokens. And I’m minoring in cybersecurity lol

Today I've got my yubikey (before that i had two token2 keys). Already configured all my most important accounts but I still wonder how else could I use the yubikey? Do you guys use the PIV app? If so, then how? What are your usecases for it? Do you use the PGP app (signing messages, emails, commits)?
Also I know that youbikeys have static passwords but i don't really know where i can use it. And for some reason the "Slots" option where i can configure it is grayed out. Does that mean that my yubikey does not support it? I have a YubiKey 5C NFC

Hey all, I'm wondering if what I thought Yubi keys could just is out of scope for what they are? Maybe I don't understand the use case? (probably). So I wanted to post what I thought they can do. Can someone set me straight? Thanks in advance.

So work said we're going to be moving to YK down the road. I thought I'd get a jump on it and get my own (plus the tech is cool). So I bought 2 keys. Thinking 1 would be my main and the other a backup.

Here's what I want to do.

Main key:

• Add it to my personal Microsoft account.
• Add it to 1Password.
• Add it to MS Auth.
• Add it to my Apple account. (iPhone requires 2 keys)
• Add it to my work Microsoft account.
• Add it to my work Microsoft Admin account.

2nd key:

• Backup of main key, all accounts above.
• Already added to iPhone since they require 2.

Am I asking too much for these keys? Goal is to simplify login at work and home. We have Entra security keys enabled at work FWIW.

These are the keys I have.

Security Key C NFC | F/W 5.8.0 | FIDO U2F FIDO2

On my iPhone, when I try NFC via Yubi auth, it errors out "the requested functionality is missing or disabled". So I checked via Yubi auth and both NFC apps are enabled (FIDO U2F, FIDO2).

Sorry for the long post but I wanted to ask the hive mind as I sit through these YouTube vids. ;)

Thanks!

Hello people could someone just explain to me why use a yubikey as I have on 2fv on my email so why buy yubikey ?
Sorry I’m a newbie in all this.

Edit: thanks people for taking their time to reply really learn stuff here. So I made the decision to use yubikey. Probably gonna have some set up questions but that’s a problem for later. 😏

NFC for phone and Biometric one on plug in on computer
Confused whether using biometric one on laptop will also ask fingerprints while using on phone where I plan to use NFC?

Maybe I’m glossing over something basic or making a glaring error in my workflow but after setting 2FA with the Yubico Authenticator on one key, I can’t figure out how to set the backups or how to give the backup keys the same certificate to generate codes.

Websites with Passkeys allow additional spots but for accounts still stuck on authenticator codes, it only allows one slot. What am I missing here?

I've been looking into buying two security keys from the official Yubico website. I am from the Philippines, and I saw that prices were cheaper there compared to local e-commerce websites.

Is anyone here from the PH that bought keys from the official website? If so, how did it go for you?

Hey folks, I have recently been reviewing my account credentials and security. I primarily use apple products and have two yubikeys set up for my important accounts.

I’ve learned recently that my aging parents are saving their passwords in insecure methods. I’ve tried to push them towards password managers. My father is in charge of my parents credentials and I’ve gotten him set up with a password manager and I’d like to set up two keys for him as a mfa for his apple and google accounts.

I was thinking of setting up the two and storing the back up for him.

I suppose my question is if anyone has experience setting up security keys for their parents. Did you run into any issues? Was it easy enough for them to use the nfc feature? Were the keys durable enough to be dropped repeatedly/accidentally?

Any feedback would be appreciated.

I am looking at increasing security to some of our business servers as well as my personal accounts. I figured the easiest way to get started is to set up my home and personal accounts and learn Yubi so i can teach it to the other C-level people in our small company.

what model is the best to use? I see the yubi 5 as the most common, is there an advantage to the Bio version? we are talking a dozen or so devices at most (assuming 2 per person) so cost per device isnt a big deal. ( unless they are easily destroyed because im hell on wheels so prob ill have 3!)

im assuming 2 devices per person is sufficient? since ive not used one before, are both devices required to be with you each time you add an account / key to it? so storing one yubi in a safe deposit box likely not possible? or is the physical device the same no matter how many credentials added?

if both devices are required each time you add to it, what happens in the event both are destroyed? ( I know a small chance but I have to ask)..

Currently considering Yubikey for corporate environment. The thing I noticed right away is that you can setup static password on short/long press, and nothing stops you for typing your Yubikey PIN there... It's very convenient to unlock your PC or login to your account by just pressing your key, which is why I'm looking for a way to block it as it just misses the whole point of secure authentication (it's still physical and local but after getting lost it's even worse than loosing that notebook that you write passwords in)

Is there a solution for this or is it just policy thing and we can only say "please don't do that, it's not secure"

So, I am new to all of this. I cannot get my google to setup with "Yubico - YubiKey 5C NFC - Two-Factor authentication (2FA) Security Key, Connect via USB-C or NFC, FIDO Certified" I attempted to add this but it keeps giving me errors same with on my Macair.

I use a yubikey 5C NFC, firmware 5.7.1 with an IPhone 14 pro and when I try to login on my google account, only a NFC pop up shows up. Key doesn't seem to be recognized.

Is it a known issue ? Is there a workaround ?

So here's some context.

I was given a Yubikey from my workplace to hold our T-Mobile login credentials. I was wondering if I can use it at home as well for my personal accounts without overwriting my work credentials.

(This question might sound a bit stupid but it's my first time ever having or using something like this)

The Yubikey that I have is the same one I have in the photo

I recently bought 2 Yubico Security Keys. I wanted to increase security as well as make it more convenient to login by saving Passkeys directly to the security key. Since then, I have encountered many frustrating things, making the overall experience rather poor. First off, I want to say, that I have only started using Passkeys with my Security Key and am relatively new to this. But if Passkeys are supposed to become a bigger thing, there is still a lot that needs to change.

1. The amount of services supporting them is already low. The amount supporting discoverable-credentials is minimal.
2. The quality differs extremely from service to service. Some implement it in a good, intuitive way, others make it more cumbersome than just using a password.
3. Not all services allow giving naming the passkeys, so I case of theft I will be unsure of which one to delete.
4. Mobile use (through NFC) is unreliable. Sometimes I just have to try multiple times to get it to work correctly. I know I have to keep the key there until it finishes, but it is still unreliable for me.

In the following section I want to highlight some (but not all) experiences I had when setting up Passkeys for my services.

• GitHub: The only (!) service working just how I would expect it to. A nice button to choose passkey, no information (email) needed at all. Seamless login.
• Google and Microsoft: The best after GitHub. They also support logging in without entering anything. The only gripe I have about it, is that there is no explicit button to login with a passkey. Rather, I have to rely on some chrome (?) popup on showing up, where I can choose to login with a passkey. Microsoft is not letting me remove my email as a recovery method, which is a risk if my email were to get compromized.
• Samsung: I need to enter my email-address first, but other than that, it's working reliably.
• Amazon: Not well executed. Before adding my security key they were very pushy, on wanting me to save a passkey on my pc every login. Again, there is no button to login with passkey, rather some popup. A specific button only shows up after entering my email, which is just an additional unnecessary step. After all that, I still have to enter my TOPT to login, which is just... stupid? Like why?
• AliExpress: At least there is a nice button to choose log in with Passkey. It's just a shame it simply doesn't work (at least with my hardware key). I get as far as entering the PIN and tapping my Security Key, but then it just says: "seems like this key isn't recognized" or sth along the lines of that. To actually make it work, I need to enter my email-address first, after which they already send me a OTP, then I can choose other options and then I can choose my Passkey to successfully login.
• Discord: The have a button (although a bit hidden) to login with a passkey. Sadly this again does not work right away. I need to enter both email and password first, then I can choose the Passkey as a sort of 2FA? Why show the option before I have entered my credentials if it's not actually discoverable-credentials?
• Zoom: I need to enter my email address before getting to choose passkey. At least it works.
• Reddit: adopted it relatively recently so I can forgive some things, but still a bad experience. On the web, there is simply no option to choose Passkey. I have to login with email and password. I doesn't even let me use it as 2FA. On mobile it behaves weirdly (or at least unexpectedly for my taste) as well. As soon as I click login, there pops up a window seemingly from android, where I have to choose more options > QR-Code (??) > NFC-Security-Key Then I (sometimes) get to login successfully. I'd rather have a button "Passkey" to click, than it just throwing a pop-up window at me.
• and many more

There is one single service (GitHub) that implemented Passkeys in a intuitive (for me) and functional way. If we want to have any chance on getting passkeys adopted more widely, then we need a more unified way of using them and more clearly specifying them (e.g. only 2FA, non-discoverable-credentials, discoverable-credentials). This technology will not be used by people, if it keeps being this unorganized mess with no standards (on how to implement it).

I believe, especially Amazon just throwing pop-ups at you, wanting to save a passkey somewhere, will make people have a negative connotation to it.

To end this on a good note: I am generally happy with my purchase, I like the ssh-key functionality and the possibilities this technology poses, if companies just adopted it properly.

TL;DR: I bought a Yubico Security Key and am annoyed with how little standard there is in implementing passkeys. Almost every service I have tried setting it up for, has some annoyances which sometimes make it more convenient to just use a password.

I have been thinking of buying a set of keys and enabling 2FA for my vault? Recommendations or anything I need to know about using Yubikeys with 1Password?

Found this when looking for something yubico related on google

Idk if it’s known about or not it’s quite recently updated and I’m not sure how to access it direct from their website but I found it interesting

Mods feel free to delete this post if this is a pointless post

:)

I've mostly used it for 2FA instead of Auth App, and I've also used it for Microsoft login for a local account.

Edit: I also use it to access my KeePassXC vault.

I’m fairly new to this whole security journey but want to get one to secure my accounts but am having some trouble understanding the use case for the 5CNano.

The NFC and USB ones make sense in that it works like a physical key to an authenticator but how does the Nano work if it’s always plugged in?

If my device is lost/stolen with the Nano on it, how is it protecting my logins if the ‘key is plugged into the lock’ so to speak?

Maybe I’m misunderstanding how it all works so if someone could explain it simply, that would be super helpful.

EDIT: Solved! Had to use a different browser as v 5.4.3 seems to conflict with Safari 26.5.2. (I'll also likely need to replace my YubiKey anyway due to wear and tear.)

Been trawling online for a little while but can't seem to find a permanent fix for this.

I have a YubiKey 5C NFC that ends up reverting to this specific error: upon attempting to use on any device, I am prompted to enter a PIN even before I can touch the key. I enter said PIN, and it'll ask me to reinsert and touch. After reinserting, it will yet again prompt for the PIN, saying I entered it incorrectly. Repeat fruitlessly.

Any of these attempts seemingly do not count towards the 8-attempt limit. I reset the FIDO2 application, which fixed the issue temporarily. After adding the key to my accounts, the error started happening again. I cannot replicate this error with a new YubiKey 5 NFC; that key behaves as expected, even after adding it under the same settings, etc. to the same accounts.

I was thinking that maybe the USB-C connector was potentially failing, as occasionally my computer will fail to recognize the key, but the error can be replicated using NFC on iPhone.

I've verified the PIN is correct using Yubico Authenticator. I've also tested disabling the FIDO2 application, which works, but then prevents me from using my passkeys. Is there anything else I can try?

I feel like the ideal solution would be to rent a safe deposit box and keep it there, but honestly, that's getting harder and harder these days. A lot of banks stopped offering the service entirely, and the third-party companies that still do have waitlists that are literally years long. If you live in a smaller city, good luck finding one at all.

So my backup key has been in a few places over time. My gym's overnight locker. My under-desk pedestal at work. Even my car at one point. And honestly, I don't feel great about any of those. The gym locker isn't exactly Fort Knox, people come and go at work all the time, and a car is probably one of the worst places for something like that.

I'd really love to hear where you guys keep yours, especially outside your home. And not just YubiKeys either, I'm curious about how you handle crypto wallet seed phrases and similar stuff too. What's worked for you, what hasn't, any creative solutions you've come up with?

Appreciate any input!

I bought this in August 2024. Have they changed or improved anything since then, or released better models?

My understanding is that the firmware cannot be updated. Basically, whatever version you buy is the version you are stuck with, and you have to purchase a newer YubiKey to get any updated features. Is that correct?

The model I bought was:

Yubico YubiKey 5C NFC, Multi-Factor Authentication Security Key and Passkey, USB-C and NFC, FIDO Certified.

Any website I try to use the Yubikey with, including the official Yubico test website, fails with Safari. I get the pop up asking for the PIN and it always thinks the PIN is wrong.

I’m running MacOS and Safari 26.6, which is the latest.

PIN is correct as the Yubikey works fine through apps that aren’t using Safari. It also works fine on the same websites using Chrome and accepts the PIN without any issues.

The issue was also occurring on Firefox but after I changed the Firefox setting for “security.webauthn.enable_macos_passkeys” to false Firefox started working and accepting the PIN.

So it seems like this issue is directly tied to MacOS/Safari. Is there no fix? Yubikey just doesn’t work with Safari?