YubiKey is a hardware security key manufactured by Yubico.

YubiKeys support a wide range of authentication standards, including:

  • FIDO2 / WebAuthn
  • FIDO U2F
  • Smart card (PIV)
  • OpenPGP
  • OATH-TOTP / HOTP
  • Yubico OTP

Rule #1: Always buy two

When ordering a YubiKey, always put two of them in the shopping cart. Saving a few bucks on a backup key can leave you with a single point of catastrophic failure. They come with a hole that lets you attach one to your keychain while the other stays in another safe, trusted location.

The moment you set up Key 1 on any service, register Key 2 at the same time.