Identity theft is still one of the biggest risks in information security today. Yubico helps organizations protect their users from the most sophisticated forms of identity theft through security keys (hardware tokens) and hardware security modules (HSMs).
YubiKey
Finding the balance between security and ease of use is a challenge for many organizations. Most forms of 2-factor authentication such as SMS authentication and soft tokens unfortunately do not offer sufficient protection against phishing attacks and man-in-the-middle attacks. The YubiKey does protect users from these forms of identity theft and also offers greater ease of use because the YubiKey eliminates the need for a username and password.YubiKeys are multi-functional hardware tokens with support for various open-source authentication protocols. Therefore, the YubiKey can be used to secure almost any computer, website, application or server. All of the YubiKeys listed below support FIDO2, U2F, Smartcard (PIV), Challenge-Response, Yubico OTP, OATH-HOTP and OATH-TOTP authentication, among others.
YubiKey 5 Series
The 5 series consists of six different keys. Choose one or more of these keys depending on the ports or devices you use within the organization. Different variants for connection to USB-A, USB-C, NFC and Lightning. The hole in the Yubikey is meant to be attached to your keychain. The Nano model is small enough to stay in your USB port of your computer.YubiKey 5 series variants:
- YubiKey 5 NFC (USB-A +NFC)
- YubiKey 5C NFC (USB-C +NFC)
- YubiKey 5 Nano (USB-A)
- YubiKey 5C (USB-C)
- YubiKey 5C Nano (USB-C)
- YubiKey 5Ci (USB-C + Lightning)
YubiKey 5 Series features:
- USB-A, USB-C, NFC
- Multi-protocol support; FIDO2/WebAuthn, U2F, Smart card, OpenPGP,OTP
- Now available YubiKey 5C NFC USB-C and NFC to secure online account
Yubikey 5 FIPS Series
The 5 FIPS series consist of six different keys. Choose one or more of these keys depending on the port or application. Different "form Factors" for connection to USB-A, USB-C, NFC and Lightning. The hole in the Yubikey is meant to be attached to your keychain. The Nano model is small enough to stay in your USB port on your computer.YubiKey FIPS series features:
- YubiKey 5 NFC (USB-A +NFC)
- YubiKey 5C NFC (USB-C +NFC)
- YubiKey 5 Nano (USB-A)
- YubiKey 5C (USB-C)
- YubiKey 5C Nano (USB-C)
- YubiKey 5Ci (USB-C + Lightning)
YubiKey FIPS Series features:
- USB-A, USB-C
- Multi-protocol support; smart card, OTP, U2F
- Suitable for governments and financial institutions
Security Key NFC
The FIDO Security Key NFC from Yubico is an alternative to the YubiKey, ideal for anyone who wants to log in securely using FIDO authentication and does not need the other authentication options that the YubiKey supports.The FIDO Security Keys NFC support both FIDO2 and U2F and can therefore be used, for example, to secure access to Microsoft Azure AD and Google G Suite.
Advantages of FIDO authentication
Strong security:
- FIDO authentication protects against phishing, session hijacking and man-in-the-middle attacks.
- Easy to use: FIDO Security Keys NFC do not require any software or drivers, the keys work out-of-the-box on almost any OS and almost any browser.
- Great privacy: the FIDO Security Key NFC generates a unique public-private keypair for each service the key is associated with.
- Cost-effective: besides the purchase of the FIDO Security Key NFC (starting at 24.50 euros), there are no costs associated with the use of FIDO security keys.
- Passwordless: eliminate (complex) usernames and passwords: thanks to FIDO2, Security Keys can be used for passwordless login.
Security Key NFC Series:
- USB-A or USB-C, both with NFC variant on one key
- Works plug and play with Gmail, O365, Facebook, and more
- Supports FIDO2/WebAuthn, U2F waterproof and damage resistant
Bio Key Series
The YubiKey Bio series, a FIDO-only security key, is available in both USB-A and USB-C variants. The key supports biometric authentication by using your fingerprint for secure and password-less logins. Designed for desktop applications, the YubiKey Bio Series supports FIDO2/WebAuthn and FIDO U2F and offers the Yubico signature hardware security and simple user experience.
Users looking for solutions to support legacy or modern systems should use the YubiKey 5 Series. Ideal for legacy or modern systems due to its multi-protocol, passwordless-enabled security keys, which provide strong security for both desktop and mobile devices.
The Bio Series emerges best in "cloud-first organizations," primarily in shared workspaces and mobile-phone-less environments.
Bio Key Series:
- USB-A, USB-C
- Supports biometric authentication and fingerprint recognition
- Supports FIDO2/WebAuthn, U2F watertight
YubiHSM 2
The YubiHSM 2 from Yubico is a dedicated hardware security module (HSM) which provides protection against theft and misuse of Certificate Authority (root) keys. One of the most common use cases for the YubiHSM 2 is securing Microsoft Active Directory Certificate Services. The YubiHSM 2 is also available as a FIPS version. Benefits of the Yubico YubiHSM:- Cost-effective HSM solution
- Secure storage and processing of private keys
- Easy to configure and deploy
