At Yubico, we have been experimenting and innovating for a long time with additionalYubiKey interface options, like Bluetooth Classic and Bluetooth Smart. Once the Bluetooth work stream was formed within FIDO U2F, we were active in completing the specification. We have passed the FIDO U2F BLE interoperability tests, and are happy to report that this week FIDO awarded us our BLE certification.
However, Bluetooth comprises several practical challenges that make ittoughto incorporate the product design, security lineage and user experience one would expect from a YubiKey. We have tested a few different designs with user groups and are now proud to deploy the latest version of YubiKey BLE into initial pilot projects.
Although we’re both proud and excited about this new wireless solution, we do want to share some of the practicalities we will continue to improve on, both for our own product and within the scope of the FIDO Alliance.
- Pairing process. Bluetooth pairing is the most critical function from a user experience point of view. Although it is perfectly understandable from an engineering perspective, the pairing can be highly confusing for the user. Whereas USB and NFC devices are “connect by intent” by their very nature, Bluetooth devices can have up to 30 meters of range. Since this is a security product, as a user you want to be certain you are communicating with the correct endpoint.
- Device and operating system compatibility issues. Bluetooth has evolved over a long period of time, and early versions of iOS and many Android flavors today still have aging BLE implementations with user interface issues. While support in audio and peripherals is common, mobile devices and operating systems embedding Bluetooth have been slow to support security-centric protocols and devices. U2F Bluetooth devices rely on the most recent version of the standard, known as Bluetooth Low Energy, a.k.a. BLE, but there are still major platforms that have either inadequate or limited support. Over time this issue goes away, but today it is at the heart of some design and implementation challenges.
- Battery life. Bluetooth devices require batteries; YubiKeys do not. This is a signature trait of our products and allows for a practically unlimited lifetime and shelf life. The Bluetooth battery requirement provides a number of design challenges around usability and regulatory issues, such as product safety, environmental concerns, disposal, and logistics.
- Radio regulatory issues. Although Bluetooth works in an open radio spectrum, devices that emit radio frequency do have to pass certain certifications. This is a complex procedure and is unfortunately tied to geographic regions.
In summary, we are selectively releasing the YubiKey BLE into specific pilots. As platform support matures during the second half of 2017, we will increase the pace of our Bluetooth certifications. Stay tuned and once the entire ecosystem is ready for prime-time, we are too.
FAQs
Check to see if the YubiKey's LED is lit - if not, the YubiKey may not be receiving power. The issue may be as simple as the YubiKey is inserted upside down for USB-A connectors. Alternatively, the USB port may not be functioning correctly - if that is the case, try on a different USB port or computer.
How do you test if YubiKey is working? ›
Testing the Credential
- Insert the YubiKey into the computer.
- Click the Yubico OTP button. The following screen, "Test your YubiKey with Yubico OTP" shows the cursor blinking in the Yubico OTP field.
- Tap the metal button or contact on the YubiKey. The OTP appears in the Yubico OTP field. ...
- Click Validate.
The YubiKey works as a passkey generator that can create both the public and private keys necessary to begin passkey login with accounts, apps, services and vendors that enable it – a YubiKey serves as a repository for up to 100 unique passkeys.
What is the difference between U2F and OTP? ›
The main difference between TOTP and U2F is that U2F is more secure and convenient to use than TOTP. U2F is more secure because it uses public-key cryptography and is phishing-resistant. Unlike TOTP, U2F is convenient to use because it does not require the user to type anything.
How do I reset my YubiKey completely? ›
Unplug the YubiKey once and then plug it back in via the USB port. Touch the YubiKey on the sensor (golden area) twice within 10 seconds to confirm the reset. The YubiKey has been successfully reset. Afterwards, if necessary, you can set a new PIN again using the Security Key PIN function.
How do I get my YubiKey to work? ›
How to set up your YubiKey
- Plug in your YubiKey.
- Go to Yubico.com/setup and click your device.
- In the Compatible accounts and services section, browse the list of supported apps and services, and select the ones you want to secure with your device.
- Your selection will appear in a list next to the available apps.
A Yubikey will essentially last forever, and if you stay clear of the insanity that is Passkeys its Webauthn element can support an infinite number of websites. Portability: I have a smartphone, a work laptop, a home laptop, and a home desktop. My Yubikey has USB and NFC, so it can trivially be used with all of them.
Does YubiKey run out of battery? ›
The YubiKey will never run out of batteries (there are none!) You don't need to read a 6 digit number and enter it manually which is prone to error and can be difficult depending on how good your eyesight is (am I getting old? :-))
Does YubiKey work without Internet? ›
The YubiKey is crush-resistant and water-resistant. It requires no battery or cellular network connectivity and its simple touch authentication is four times faster than typing a One Time Password.
What is the difference between passkeys and U2F? ›
Passkeys aren't more secure – but they're a great way to bring the phishing resistance of WebAuthn/FIDO/U2F to the masses, without having to buy expensive hardware keys. Passkeys can be more secure than U2F keys.
Best Overall Security Key
The Yubikey Security Key C NFC is our top pick for most people. It features excellent build quality, and its USB-C connector means it works on just about every new device. It also has NFC support, which lets it authenticate on mobile devices that lack a USB port.
Can I use 2 different YubiKeys? ›
Lastpass, for example, allows you to add five YubiKeys per account. Check your service's security settings for more info. Q: Should my spare key be the exact same as my primary key? A: Nope, this is not necessary.
What are the disadvantages of U2F? ›
There is one significant disadvantage of U2F solutions in comparison to TOTP (which uses a shared secret): For U2F there is no option to back up recovery codes of shared secrets. If a hardware key is lost, it will become impossible to login to the services and apps that were originally secured with this hardware key.
What is the safest authentication type? ›
Categories
- The Three Types of Authentication Factors.
- Least Secure: Passwords.
- More Secure: One-time Passwords.
- More Secure: Biometrics.
- Most Secure: Hardware Keys.
- Most Secure: Device Authentication and Trust Factors.
Support and use
U2F security keys can be used as an additional method of two-step verification on online services that support the U2F protocol, including Google, Azure, Dropbox, GitHub, GitLab, Bitbucket, Nextcloud, Facebook, and others.
Can YubiKey get damaged? ›
Leaving it plugged in could result in the yubikey being lost or damaged.
Why is my YubiKey NFC not working on my Iphone? ›
If you have an issue, upgrade to iOS 16.3 and then remove and re-add your Yubikey.
How do I recover my YubiKey? ›
So, what happens if you lose your YubiKey? In that case, you can still use your Authenticator app (phew!). While you can't create a backup YubiKey, you can always contact Yubico to get a replacement key.
