Security keys are physical authenticators that protect online accounts with a hardware second factor, and they suit individuals, IT administrators and businesses that want stronger sign-in than a text message code. The range of over 10 products comes from Yubico, the maker of the YubiKey.
How to choose a security key
Supported protocols. Check which standards the key handles. FIDO2 and WebAuthn cover passkey and passwordless sign-in on most modern services, while smart card (PIV), OpenPGP and one-time password support matter for corporate logins, code signing and encrypted email. The more protocols a key supports, the more systems it can secure.
Connector and NFC. Match the key to the ports you use daily. USB-A and USB-C keys plug into laptops and desktops, and NFC lets you tap the key against a phone. If you use both a laptop and a phone, a USB-C key with NFC usually covers both.
Form factor. Standard keys sit on a keyring and are easy to carry. Nano-style keys are small enough to stay in a USB port permanently, which is convenient on a desktop but less so if you move between devices, as the key can be harder to remove.
Biometric option. Some keys add a fingerprint reader, so the key itself verifies that you are the person using it rather than relying on a PIN. This suits shared workstations and people who want to avoid typing a PIN, but it is not needed for every account.
Backup keys. Buy at least two keys and register both with each account. A spare kept in a safe place means a lost or damaged key does not lock you out.
Security key brands we carry
- Yubico: The Swedish company behind the YubiKey, which helped develop the FIDO U2F and FIDO2 standards that most security keys now follow. Its keys are widely supported by password managers, Microsoft and Google accounts, and many business identity platforms.
Security keys FAQ
What is a security key and how does it work?
A security key is a small hardware device that confirms your identity when you sign in. You plug it in or tap it against a phone, and it proves you hold the key without sending a reusable secret. This makes phishing far harder than with passwords or text message codes.
Do I need more than one security key?
Yes, it is sensible to have at least two. Register both with every important account, then keep the spare somewhere safe. If you lose the main key, you can still sign in and remove the lost one from your account.
Will a security key work with my phone?
It can, provided the connection matches. Keys with NFC work with most modern smartphones by tapping, and USB-C keys connect to phones that have a USB-C port. Check that the apps and services you use support security keys on mobile before buying.
Is a YubiKey better than an authenticator app?
A hardware key gives stronger protection against phishing, because it only responds to the genuine website. An authenticator app is more convenient and free, but its codes can be typed into a fake site. Many people use a key for important accounts such as email, banking and password managers, and an app elsewhere.
