Spare YubiKeys (2024)

FAQs

How many YubiKeys should I have? ›

Starting off, you should be fine with 1-2 spare keys. Q: How many spares can I add to each service/account? A: It depends on the service. Lastpass, for example, allows you to add five YubiKeys per account.

Each physical YubiKey token has its own unique identifier. YubiKey recommends having more than one token to reduce the risk of being locked out of your account because of token loss. You can link up to 5 YubiKey tokens with your account.

We at Yubico always recommend having more than one YubiKey. This way, one key can be used as a primary key, and the other can be used as a spare. Please note that for security reasons, the firmware of our products does not allow stored secrets to be read, meaning it is not possible to “clone” or "duplicate" a YubiKey.

While one YubiKey is enough to get started with, I have several. Not only does this give me a backup in case I lose one (I haven't yet!), but if I pick a couple with different connectors (say the USB-C/Lightning and a USB-A with NFC), this gives me the flexibility to log into accounts across a range of devices.

The counter starts at zero and is incremented each time the device is plugged in. Two bytes for the session counter allows for 2(2*8) = 65,536 sessions. In other words, you can plug in the Yubikey three times a day for almost 60 years before running out of session counters.

To do this, you will first need to use the Yubico Authenticator app to scan the QR code that was issued to the first security key by the service. Then get the QR code for the second security key. Scan it with the same app and link them that way. After that, you can use any of these keys for authentication.

Do I need to keep my yubikey plugged in all the time? A. No, you only need to insert your yubikey when you are prompted to do so during login. Leaving it plugged in could result in the yubikey being lost or damaged.

Yes! Just plug your YubiKey into any computer and log in the way you normally would. That's really it—you'll be able to log in to all of your accounts, same as before. You can use your YubiKey to log in on as many devices as you want, so long as there's a slot for it.

Should YubiKeys be reused? YubiKeys could be reused. There are a number of considerations that need to be taken into account when deciding on whether or not to reuse YubiKeys. Besides removing and reissuing credentials, tracking systems may need to be updated.

How many passwords does YubiKey hold? ›

OATH (Yubico Authenticator) - the YubiKey 5's OATH application can hold up to 32 OATH-TOTP credentials (AKA authenticator app codes).

If you lose your Yubikey, you can still use your phone authenticator app, but you cannot create a backup Yubikey. However, Yubikey also provides methods to recover your account, so you can get a replacement. An advantage to Yubikey is that it comes on a USB that cannot be identified.

YubiKeys are the most effective tool to prevent cyber attacks. They work with any device to add secure and easy-to-use protection against phishing for all online accounts.

Most people should have at least two security keys: one for everyday use and a backup key that can stay somewhere secure, such as in a safe, if you lose your everyday key. Some people may want additional keys for different devices. Additionally, the security key ecosystem has some rough edges.

Overview. The YubiKey and 1Password together provide an additional layer of security to your personal and business accounts. With two-factor authentication enabled with your 1Password accounts, you effectively protect your credentials and accounts from unauthorized access.

Yubico's YubiKey is built on a foundation of strong authentication. This robust resistance to phishing offers malware protection because it hinges on the ability to detect these attacks before they take place.

It's also commonly abused as a keylogger when those systems are compromised, and I created the xinput-keylog-decoder tool for that purpose. Since the YubiKey is essentially a keyboard, the first thing I did to start capturing its keypresses was to identify its ID number within xinput.

The YubiKey is not only ultra-thin, crush safe and battery-free, it is water-resistant as well. It has both survived diving 48 meters down in salt water and more than two months of laundry.

Certified Reseller

Certified Resellers are authorized to resell YubiKeys to customers only in the specified countries or regions.

The device can be physically reset to its factory settings. To do this, while inserting the device into a USB port, press the metal rim as you insert the device and continue to press the rim for a minimum of 10 seconds.

Why is YubiKey so expensive? ›

It is costly to design, mould, manufacture, sell and support a hardware product, even something as small as this. Since you don't want your 2FA company to go out of business there is good value in knowing they have a stable business model that can actually support a company rather than just burning capital.

How can I safely remove my YubiKey? The YubiKey identifies as a USB keyboard to your PC, and does not need to be ejected when removed – you can just pull it out!

The solution: YubiKey + password manager

Using a password manager application is the best way to create and maintain unique and strong passwords for all your account logins, and protecting your password manager with a YubiKey is the most secure way to manage multiple digital credentials.

Do I need to keep my yubikey plugged in all the time? A. No, you only need to insert your yubikey when you are prompted to do so during login.

The YubiKey supports one-time passcodes (OTP)

This means OTP protocols can work across all OSs and environments that support USB keyboards, as well as with any app that can accept keyboard input.