YubiKey · security keys
YubiKey is the ubiquitous hardware security key: it works with everything, and it's the safe default for phishing-resistant MFA. We don't distribute it — so these are honest Amazon-affiliate links to Yubico's own listings, at Amazon's price. If you care about open-source, auditable firmware and EU jurisdiction, we think Nitrokey is the better key — and we distribute that one ourselves. Both are here; pick your philosophy.
Find your key
Amazon firmware caveat. Amazon stock may ship older firmware than yubico.com (Yubico's own listings note "latest firmware is not assured" via Amazon). Fine for most personal use — but if you need a specific firmware or FIPS validation, buy direct at yubico.com.
Buy two. Yubico recommends buying TWO keys — one for daily use, one spare in a safe place — so a lost or broken key never locks you out of your accounts. Set up both at once.
Verify genuine. Verify any key is real at , and buy from "Sold by Yubico Inc." (or Amazon) — never a sketchy third-party reseller.yubico.com/genuine.
Security Key Series
from $29 directBudget entry — FIDO2/WebAuthn + U2F only (no OTP, PIV, or OpenPGP). The "just protect my Google / Microsoft / 1Password logins" key.
Security Key C NFC
USB-C + NFC
Security Key NFC
USB-A + NFC
FIDO-only — does NOT work with LastPass (that needs a YubiKey 5).
YubiKey 5 Series Most buyers start here
from $58–85 directThe workhorse — multi-protocol: FIDO2/WebAuthn, U2F, Yubico OTP, OATH TOTP/HOTP, PIV smart card, and OpenPGP. The core key for most buyers.
YubiKey 5C NFC Top pick
USB-C + NFC
Most popular — the modern default for USB-C phones + laptops.
YubiKey 5 NFC
USB-A + NFC
The classic flagship.
YubiKey 5Ci
Lightning + USB-C
The iPhone/Mac dual-connector key.
YubiKey 5C
USB-C
YubiKey 5C Nano
USB-C · low-profile
Stays in the port — for a machine you leave keyed.
YubiKey 5 Nano
USB-A · low-profile
Stays in the port.
YubiKey 5 FIPS Series
from $88–115 directFIPS-validated — for CISO, government, and regulated buyers (AAL3, EPCS, PCI). Same protocols as the YubiKey 5.
FIPS 140-2 vs 140-3: Two FIPS lines exist: older FIPS 140-2 (firmware v5.4, sunset) is what most Amazon stock is — the 5C NFC FIPS Amazon listing itself reads "140-2." The current validation is FIPS 140-3 (v5.7). If you have a 140-3 requirement, do NOT grab 140-2 stock off Amazon — buy direct at yubico.com where the 140-3 SKUs and guaranteed firmware live.
YubiKey 5C NFC FIPS
USB-C + NFC
Core FIPS pick.
YubiKey 5 NFC FIPS
USB-A + NFC
140-3 (current), sold by Yubico.
YubiKey 5C FIPS
USB-C
YubiKey 5C Nano FIPS
USB-C Nano
Stays in port.
YubiKey 5 Nano FIPS
USB-A Nano
140-3 (current).
YubiKey 5Ci FIPS
Lightning + USB-C
140-3 — the iPhone/Mac FIPS key.
YubiKey Bio Series
from $98 directBiometric (fingerprint) — no PIN fumbling. FIDO-only. Premium UX for shared workstations and execs.
YubiKey Bio — FIDO Edition
USB-A · biometric
v5.7 firmware. FIDO-only.
YubiKey C Bio — FIDO Edition
USB-C · biometric
v5.7. FIDO-only. (A Bio Multi-Protocol Edition adds PIV/smart-card.)
Prices shown on Amazon. As an Amazon Associate we earn from qualifying purchases. YubiKey is a curated affiliate line — we don't stock it; Yubico (or Amazon) ships and bills you directly.
YubiKey vs. Nitrokey — the straight version
We sell YubiKey honestly, but we'll always tell you where we think open-source wins. Here's the real comparison — no spin.
The genuine YubiKey edge: if your mandate specifically requires FIPS 140-2/140-3 validated cryptography (many US federal, FedRAMP, and CMMC Level 2+ programs do), the YubiKey 5 FIPS series is validated and Nitrokey is not — Nitrokey certifies to Common Criteria EAL 6+ instead, which is a higher assurance level but a different scheme that FIPS mandates don't accept as a substitute. For that requirement, buy the FIPS key direct at yubico.com to guarantee the 140-3 SKU.