YubiKey 5 Series

The multi-protocol security key thatenables passwordless
Relying solely on username and password security
puts enterprise data at risk
Catastrophic security breaches top world headlines every day,and for good reason. A single corporate security breach costs anaverage of $4.45M,1 with phishing and stolen or compromised
credentials the two most common initial attack vectors. As aresult, IT organizations cannot rely exclusively on passwords
to protect access to corporate data. Adopting stronger
employee and customer authentication is essential to avoidingrisk and becoming the next target.

Phishing-resistant MFA with Smart Card/PIV andFIDO2/WebAuthn
The YubiKey 5 Series is a hardware-based authentication
solution that provides superior defense against accounttakeovers and enables compliance. The YubiKey offers
strong authentication with support for multiple protocols,including existing Smart Card/PIV, and FIDO2/WebAuthn, thenew standard enabling the replacement of weak passwordbased authentication. With the YubiKey, security is heightenedwith strong hardware-based authentication using publickey cryptography. And the YubiKey is easy to use, fast andreliable, and is proven at scale to significantly reduce IT costs
and eliminate account takeovers.

The YubiKey 5 Series–from left to right: YubiKey 5 NFC, YubiKey 5C NFC,YubiKey 5Ci, YubiKey 5C, YubiKey 5 Nano and YubiKey 5C Nano.

The YubiKey 5 Series security keys deliver expandedauthentication options• Strong Single Factor—Passwordless: Replaces weakpasswords with passwordless tap-n-go secure login.

• Strong Two Factor—Password + Authenticator: Adds a

tap-n-go second factor for secure two factor authentication.

• Strong Multi-Factor—Passwordless + PIN: Combines

tap-n-go authentication with a PIN, to solve high assurance
requirements such as financial transactions, or submitting
a prescription.

The YubiKey delivers strong authentication at scale
The YubiKey multi-protocol support streamlines authenticationfor existing systems while paving the way forward to apasswordless future.
• Authentication and cryptographic protocols supported

include FIDO Universal 2nd Factor (U2F), FIDO2/WebAuthn,
Personal Identity Verification-compatible (PIV) Smart Card,and OpenPGP smart card.

• Works across major operating systems including Microsoft

Windows, macOS, iOS, Android, and Linux, as well as
leading browsers.

• Available in a choice of form factors that enable users toconnect via the USB, NFC or Lightning connector.

• The YubiKey 5C NFC offers multi-protocol capabilities withboth USB-C and NFC capabilities for secure tap and goauthentication on all the modern devices users love.

• Streamlines asset tracking and account recovery processes

with enterprise attestation for custom programmed keys.

• Enforces compliance requirements and elevates security forPIN usage with the latest FIDO2 features such as Force PIN
Change and Minimum PIN Length.

• Expanded storage capabilities for FIDO2 discoverable

credentials and OATH one-time passwords, accommodating
up to 100 passkeys and 64 OATH slots per application.

YubiKeysdeployed in:
1IBM, 2023 Cost of a Data Breach Report

9 of the top 10
global technology
companies

4 of the top 10
U.S. banks

5 of the top 10
global retailers

YubiKey: Proven, easy-to-use security that’s trusted by theworld’s leading companies
Eliminate account takeovers

Easy to deploy

Any software downloaded on a computer or phone isvulnerable for malware and hackers. The YubiKey is based on
hardware with the authentication secret stored on a separate
secure chip built into the YubiKey, with no connection to theinternet so it cannot be copied or stolen.

IT can deploy YubiKeys in days, not months. A single key,through its flexible multi-protocol capabilities, can work
out-of-the-box with hundreds of systems, both cloud andon-premises. This eliminates the need for costly integrations
or separate devices for each system.

Reduce IT costs
The YubiKey dramatically reduces the number one IT support
cost—password resets—which cost Microsoft over $12M
per month.2

FIDO2

FIDO U2F

Smart Card (PIV)OATH(TOTP/HOTP)

ConfigSlot 1 & 2Open PGP

By switching from mobile one time passwords (OTPs) toYubiKeys, Google saw the following results.3• Zero account takeovers• 4x faster logins• 92% fewer IT support calls
SUPPORT INCIDENTS PER USER PER MONTH

Support incidents

80

Security KeyOTP
Active Security Key users

60

40

20

Percent of users using Security Keys

100

0JUL-14

SEPT-14NOV-15

JAN-15MAR-15

MAY-15JUL-15

SEP-15

NOV-15

YubiKey capabilities: These functions are included in the YubiKey 5 NFC,YubiKey 5C NFC, YubiKey 5C, YubiKey 5 Nano, the YubiKey 5C Nano,and the YubiKey 5Ci security keys. Technical specifications are available
at yubico.com.

Trusted authentication leader
Yubico is the principal inventor of the FIDO2/WebAuthn andU2F authentication standards adopted by the FIDO allianceand is the first company to produce the U2F security key anda multiprotocol FIDO2/WebAuthn authenticator.
YubiKeys are produced in our offices in the USA and Sweden,
maintaining security and quality control over the entire
manufacturing process.

This graph illustrates how quickly Google reduced password support
incidents after switching from OTP to YubiKey.4

Easy to use, fast, and reliable

WATER RESISTANT

Users don’t need to install anything and can use the YubiKeyin minutes. And the YubiKey is reliable because it does not
require a battery or cellular connectivity, so it’s always onand accessible.
The YubiKey 5 NFC, YubiKey 5C NFC, YubiKey 5C, andYubiKey 5Ci fit conveniently on a keyring, while the YubiKey 5
Nano and YubiKey 5C Nano are designed to remain in theUSB port. This ensures every YubiKey is easy to access andprovides the same level of digital security.

Yubico (Nasdaq First North Growth Market Stockholm: YUBICO) is the inventorof the YubiKey, the gold standard in phishing-resistant multi-factor authentication(MFA), and a creator and contributor to FIDO open authentication standards. TheContact us

CRUSH RESISTANT

yubi.co/contact

2MADE IN US & SWEDENLearn moreyubi.co/yk5“Saying Goodbye to Passwords,” Alex Simons, Manini Roy, Microsoft Ignite 2017

3Google Research, Security Keys: Practical Cryptographic Second Factors for the Modern Web

4

Google Research, Security Keys: Practical Cryptographic Second Factors for the Modern Web

company is a pioneer in delivering hardware-based passkey authentication tocustomers in 160+ countries. For more information, visit: www.yubico.com.
© 2024 Yubico