--- title: "Yubico YubiKey Review: Hardware MFA and Passwordless | IDSync" description: "Yubico makes YubiKey hardware security keys for phishing-resistant MFA and passwordless. See strengths, limitations and when to choose it." lang: en json-ld: | [ { "@context": "https://schema.org", "@type": "SoftwareApplication", "name": "Yubico", "applicationCategory": "SecurityApplication", "applicationSubCategory": "MFA / Passwordless", "url": "https://www.yubico.com", "description": "Yubico designs and manufactures YubiKey hardware security keys, which are widely used as phishing-resistant MFA factors and a foundation for passwordless authentication. YubiKeys support FIDO2 / WebAuthn, U2F, smart card (PIV) and OTP modes and integrate with most major identity providers. Yubico also offers YubiEnterprise services such as subscription delivery and key management for enterprises rolling out hardware keys at scale.", "offers": { "@type": "Offer", "category": "perpetual" }, "dateModified": "2026-05-31T13:58:15.541473+00:00" }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "What is Yubico?", "acceptedAnswer": { "@type": "Answer", "text": "Yubico designs and manufactures YubiKey hardware security keys, which are widely used as phishing-resistant MFA factors and a foundation for passwordless authentication. YubiKeys support FIDO2 / WebAuthn, U2F, smart card (PIV) and OTP modes and integrate with most major identity providers. Yubico also offers YubiEnterprise services such as subscription delivery and key management for enterprises rolling out hardware keys at scale." } }, { "@type": "Question", "name": "Who is Yubico best for?", "acceptedAnswer": { "@type": "Answer", "text": "Security-conscious organizations rolling out phishing-resistant MFA or passwordless using hardware security keys." } } ] }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://idsync.com/" }, { "@type": "ListItem", "position": 2, "name": "Directory", "item": "https://idsync.com/directory" }, { "@type": "ListItem", "position": 3, "name": "MFA / Passwordless", "item": "https://idsync.com/directory/category/mfa" }, { "@type": "ListItem", "position": 4, "name": "Yubico", "item": "https://idsync.com/directory/yubico" } ] } ] --- [![IDSync — identity software buyer platform](/assets/idsync-logo-BKS89EW4.png)](/) [Directory](/directory) [Compare](/compare) [Resources](/resources) [Browse tools](/directory)[Run Stack Finder](/stack-finder) 1. [Home](/) 2. [Directory](/directory) 3. [MFA / Passwordless](/directory/category/mfa) 4. Yubico ![Yubico company logo](https://www.google.com/s2/favicons?sz=128&domain=yubico.com) # Yubico Maker of YubiKey hardware security keys, widely used for phishing-resistant MFA and passwordless via FIDO2 / WebAuthn. Last updated 3 months ago [Visit site](https://www.yubico.com) Quick answer ## What is Yubico? Short answer Yubico designs and manufactures YubiKey hardware security keys, which are widely used as phishing-resistant MFA factors and a foundation for passwordless authentication. YubiKeys support FIDO2 / WebAuthn, U2F, smart card (PIV) and OTP modes and integrate with most major identity providers. Yubico also offers YubiEnterprise services such as subscription delivery and key management for enterprises rolling out hardware keys at scale. Best for Security-conscious organizations rolling out phishing-resistant MFA or passwordless using hardware security keys. When to choose You need phishing-resistant authentication for employees, admins or high-value customers. When not to choose You want a software-only MFA story or are not ready to manage hardware tokens. Related tools & categories [MFA / Passwordless](/directory/category/mfa)[Duo Security](/directory/duo)[Microsoft Entra](/directory/microsoft-entra)[Run the IAM Stack Finder](/stack-finder)[Report: The State of AI Agent Identity 2026](/reports/state-of-ai-agent-identity-2026) ## Categories [MFA / Passwordless ★](/directory/category/mfa) ## Common use cases - Phishing-resistant MFA - Passwordless via FIDO2 / WebAuthn - Privileged user protection - High-assurance customer authentication ## Strengths - Strong phishing-resistant security model - Works with all major IdPs - Multiple form factors (USB-A, USB-C, NFC, Lightning) - Mature enterprise distribution program ## Limitations & considerations - Hardware cost and logistics - Lost / replacement keys need a process - Best paired with an IdP that supports FIDO2 properly ## Pricing model summary Hardware keys sold per unit (often $25-$70+ depending on model). YubiEnterprise Subscription bundles keys, replacements and delivery into annual per-user pricing. [View vendor pricing page ↗](https://www.yubico.com/store/) ## Integrations FIDO2 WebAuthn U2F PIV OIDC SAML Microsoft Entra Okta Duo ## Fit Company size smb, mid\_market, enterprise Deployment saas, hybrid Source commercial Pricing model perpetual ## Alternatives & comparisons [Duo Security](/directory/duo) Widely deployed MFA and zero trust access platform from Cisco, with strong device trust and push-based authentication. [Compare Yubico vs Duo Security →](/compare/yubico-vs-duo) [Microsoft Entra](/directory/microsoft-entra) Microsoft Entra ID is Microsoft's cloud-based identity and access management service, providing SSO, MFA, Conditional Access, and identity governance tightly integrated with Microsoft 365 and Azure. [Compare Yubico vs Microsoft Entra →](/compare/yubico-vs-microsoft-entra) [Okta](/directory/okta) Okta is a leading cloud-native identity and access management platform offering SSO, MFA, lifecycle management, and identity governance for enterprise workforce and customer-facing applications. [Compare Yubico vs Okta →](/compare/yubico-vs-okta) IDSync provides educational buyer guidance based on publicly available information, editorial review, and user-submitted data. Vendor information should be verified before purchase. [Who we are, our methodology & disclosure policy](/about). Yubico and its logo are trademarks of their respective owner. IDSync is an independent buyer resource and does not imply endorsement unless explicitly stated. ### Take action [Request vendor shortlist](/request-shortlist)[Run the IAM Stack Finder](/stack-finder)[Request vendor intro](/contact)[Docs ↗](https://docs.yubico.com/)[Pricing ↗](https://www.yubico.com/store/) ### Work at Yubico? Claim this profile to keep it current. Claim this profile [![IDSync home](/assets/idsync-logo-BKS89EW4.png)](/) The buyer-focused platform for identity, access, and authentication software. #### Platform - [Home](/) - [IAM Stack Finder](/stack-finder) - [Directory](/directory) - [Resources](/resources) - [State of AI Agent Identity 2026](/reports/state-of-ai-agent-identity-2026) - [Buyer Guides](/guides) - [Glossary](/glossary) - [Newsletter](/newsletter) - [Newsletter Archive](/newsletter/archive) #### Best of guides - [All comparisons](/compare) - [All vendor alternatives](/alternatives) - [Best SSO tools](/compare/best-sso-tools) - [Best MFA tools](/compare/best-mfa-tools) - [Best PAM tools](/compare/best-pam-tools) - [Best IGA tools](/compare/best-iga-tools) - [Best CIAM tools](/compare/best-ciam-tools) - [Best passwordless auth](/compare/best-passwordless-authentication-tools) - [Best identity security](/compare/best-identity-security-tools) - [Best machine identity](/compare/best-machine-identity-tools) - [Best SaaS access governance](/compare/best-saas-access-governance-tools) - [Best developer auth](/compare/best-developer-authentication-tools) - [Best for startups](/compare/best-iam-tools-for-startups) - [Best for enterprises](/compare/best-iam-tools-for-enterprises) - [Best SCIM tools](/compare/best-scim-provisioning-tools) - [Best for AI agents](/compare/best-ai-agent-identity-tools) - [Best NHI tools](/compare/best-nhi-management-tools) - [Okta pricing explained](/guides/okta-pricing) - [Auth0 pricing explained](/guides/auth0-pricing) - [Okta alternatives](/alternatives/okta) - [Auth0 alternatives](/alternatives/auth0) #### For Vendors - [Sponsor](/sponsor) - [Badges](/badges) - [Submit Product](/submit-product) - [Claim Profile](/claim-profile) - [Partner](/partner) #### Company - [About & Methodology](/about) - [Contact](/contact) - [Privacy](/privacy) Vendor names, logos, and trademarks are the property of their respective owners. IDSync is an independent buyer resource and does not imply endorsement unless explicitly stated. Logos are displayed for identification purposes only. IDSync (idsync.com) is operated by TetraCore, Bowling Green, Ohio. It is not affiliated with the IDSync® Active Directory synchronizer by Identity Syncronizer — [learn more](/about#idsync-disambiguation). © 2026 IDSync. All rights reserved. Editorial independence. Sponsored placements are clearly disclosed.