Yubico - YubiKey 5 Nano A - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB, FIDO Certified - Protect Your Online Accounts (Nano USB-A)

Since I work in IT, let me just say one thing. After installing this for a few users, together with our ani-virus it has prevented phishing attacks 100%. We plan to provide this on more users. I will be listing things I like about the key and some things I dislike/recommendations in hopes that this will help you make a decision. Overall, I highly recommend this key and wish I would have gotten it sooner. Likes: - Made to stay in a laptop. (Do not loose the laptop) - It's easy to configure and really secure. - Small, discrete and easy to cary around. - Made in USA and Sweden. - If you have security concerns with Google or other companies. - it is not a google product, thus they will not have access. - It works with most sites and if configured properly can be used to sign-in to windows, mac or your network. YouTube will have several tutorials on how to do this. - Compared to RSA security keys, you get this at a bargain. - It's a consumer version so it is not overly complicated. - There are several security/authentication methods you may use. But, the simplest one is using 2FA (Two Factor Authentication). You can use this without giving your phone number or answering security questions (which we forget). Dislikes/Recommendations: - Not every site supports yubikey - There are additional software used to manage but takes a while before you can understand what these can do or how to use it properly. - Made for a laptop so it may be a bit difficult to pull it out. It's basically made to be kept in the laptop. 'Just don't loose the laptop. You need to attach a string or a keychain so you can pull it out easier from the usb slot. - From time to time you need to remove the key and re-insert it into the USB slot. There are also 2 points you need to consider. * Before purchasing the key, make sure that the site you will be using it supports this. Here is a list of sites which supports the key. The list keep growing https://www.yubico.com/works-with-yubikey/catalog/ * You need to purchase 2 keys. Same a a physical door key, if you loose one, you have a duplicate. It will be more difficult verifying your information if you loose a key without a duplicate.

The Yubico YubiKey 5 Nano has become an indispensable guardian for my online security, delivering top-tier two-factor authentication (2FA) in a compact USB-A package. This little key packs a powerful punch, providing peace of mind that goes beyond traditional password protection. The FIDO certification adds an extra layer of credibility, assuring users of its compatibility with a wide range of platforms and services. The Nano's compact size is a standout feature, allowing it to seamlessly blend into my device without protruding or being cumbersome. Setting up the YubiKey 5 Nano was a breeze, and the connectivity via USB-A ensures widespread compatibility across various devices. The robust construction instills confidence in its durability, and the convenience of having this tiny security powerhouse on my keychain is unmatched. I appreciate the simplicity and effectiveness of the YubiKey 5 Nano – it truly streamlines the authentication process without sacrificing security. For anyone serious about protecting their online accounts from unauthorized access, this is an investment that pays dividends in digital peace of mind. Yubico has set the gold standard for 2FA, and the YubiKey 5 Nano is a testament to their commitment to online security excellence. Highly recommended!

works amazin

Perfect device for using passkeys. I leave this one plugged in for convenience and have a second I keep stored as a backup. Plug and play with the knowledge that passkeys offer an extra layer of security that traditional passwords and even MFA do not.

The key works as advertised... when you can get it to work. I have no issues installing on my first PC. When I tried to install it on the second identical PC, no luck. I tried Yubi support, but they couldn't wait to tell me "sorry, not our problem." Seriously, they didn't even try to help me. So I kept one key and returned the other. Problem solved. Do any older people on here remember an obsolete term from the 20th century called "Customer Service"?

Works as expected. The key is very low profile after its in the USB port. Before inserting, put a loop of string through the small hole at the top of the YubiKey. If you don't it will be next to impossible to remove the key from the USB port.

Amazon product! Not super nube friendly but if you can sit through a video and hit pause a few times, not bad. I keep this plugged into my laptop pc and also bought 2 of the usb c ones for my cell phone. Buy one for carry, the other to keep in a safe place. Register both so if you lose one you can still access your online accounts

These are very highly recommended for proper secure login. These are a great setup as they can be left in a laptop without interfering with operation or transport. Though I should note that for security reasons you should never have this in a laptop while traveling. These types of keys are great for increasing security while also increasing convenience which is very rare. The Yubikey ones have a couple of advantages over some others, first Yubico has been involved in developing these standards from the start and second, these support many different protocols, so just about everything that uses any type of key for 2 factor auth or for passwordless auth is practically guaranteed to support yubikeys.

Wofür ich den Key nutze * Webauthn, bei Google, Cloudflare oder Nextcloud als zweiten Faktor (leider wenig support aber es wird besser). Aktuell unterstüzen das primär Ammi Tech Firmen (github, gitlab, Namcheap …) oder vielleicht n paar Open Source Dinger. * SSH man kann mittlerweile FIDO Security Keys als SSH keys nutzen (ed25519-sk keys, sk = security key) * OATH Secrets, klassiche Zeitbasierte Login tokens wie man sie vom Handy kennt für Dienste die kein Webauth, also einfach knopf auf Security Key drücken, supporten. Angenehmer weil der Code direkt per STRG V eingefügt werden kann und etwas sicherer als dafür das Handy zu nutzen. * HMAC Challange Response kann als zusätzlicher Faktor für KeePassXC genutzt werden PIV/GPG Smartcard support nutze ich nicht (so würden sich aber auch klassiche SSH keys auf dem Key speichern lasser). Genau so wenig YubicoOTP, vielleicht wäre des ebenfalls für SSH interessant wenn man die neueren ed25519-sk keys nicht nutzen kann. Die ersten beiden Punkte müssten auch über den günstigeren blauen Security Key gehen, falls die anderen Features nicht interessieren. Der Preis ist mein einziger wirklicher Kritikpunkt, da man am besten mehrere Keys hat schon teuer, hatte überlegt den zu nehmen der nur FIDO2/u2f kann ober wollte die OATH Features. Der key ist auch nicht so einfach zu entfernen, das ist etwas fummelig, aber da er ja dafür gedacht ist im USB Port zu bleiben finde ich das nicht so schlimm (dafür hab ich n normalen Yubikey 5c). Die komplexeren Features sind denke ich etwas schwer zu verstehen, insbesondere die PIV/Smartcard features, aber an sich finde ich den Key einfach zu nutzen. Insbesondere wenn man ihn einfach als zweiten Faktor für online accounts will oder ssh -sk keys.

I need to type OTPs all over the day. Now, I have configured Yubico as my OTP provider and the whole process takes less an a second. It saved me.

Yubico es la máxima garantía de seguridad, es la mejor elección

it arrived on-time and well packed. this items is used for special purposes like storing secure transactions or crypto wallet. so who buy it are aware of its value. To me, it is one the best HSM in the market

I think some of the 1 and 2 star reviewers need to take more time to understand exactly what it is they're buying. Firstly, it's a MULTI-FACTOR device, it's not supposed to replace passwords (yet), hence the term MULTI-FACTOR, there are MULTIPLE FACTORS to your login procedure, the first one being your username and password, the second being this key. Secondly, it doesn't type out your password on screen, it types a cryptographically-calculated string which changes each time and is specific to the hardware key itself. The interaction of touching the device is in place to work with your chosen software when it prompts for a U2F device, where you need to press the key to activate it. This is to stop automated log ins when the key is connected, it requires a human to physically activate it. Pressing the key at any other time will output a meaningless code onto your computer, which means nothing to unconfigured software, so this is not a security risk. Thirdly, not all services support hardware keys yet. New hardware and software takes a VERY long time to be supported by all platforms and always starts with the biggest (Google, Microsoft, Amazon, Facebook, etc). You should check that the services you want to use this for actually support hardware keys. Lastly, this is supposed to be small. If you're complaining about it's size when there are other options available like the standard Yubikey 5 or Yubikey 5C, then that's your problem not the product's. This is supposed to be a static key that can be removed if necessary, such as for a personal laptop, and should be used in conjunction with another 2FA method as a fallback e.g. mobile authenticator app. This is a great product that does the job it's designed for. It's working well with Yubico Windows login software and a number of online accounts.