Reader-supported: we may earn a commission from links on this page. We research; we don’t lab-test.
A security key is a small device that makes a stolen password useless. But Yubico alone sells a basic Security Key series and a YubiKey 5 series, each in USB-A, USB-C, NFC and Lightning versions, and the names are confusing. We went through the listings, Yubico’s own specs, and Apple’s and Google’s security key rules to work out which one you actually need.
In this guide:
- Quick Answer: Which Key Should You Buy?
- What Is a Security Key (FIDO2 and U2F)?
- Passkey vs. Security Key
- The 5 Yubico Keys Compared
- Our Picks
- Security Keys for iPhone
- Do You Actually Need One?
- How to Set Up a Security Key Without Locking Yourself Out
- Our Verdict
- Frequently Asked Questions
Quick Answer: Which Key Should You Buy?
- Most people: the Yubico Security Key C NFC. It covers passkeys and FIDO2 sign-in for Google, Microsoft and Apple accounts, and works over USB-C or with a tap on your phone.
- Older computer with USB-A ports: the Yubico Security Key NFC, the same key with a USB-A plug.
- Work accounts or apps that need one-time codes: the YubiKey 5C NFC.
- iPad or older iPhone with a Lightning port: the YubiKey 5Ci.
- Whatever you pick, buy two. One for daily use, one as a backup. Apple requires two.
What Is a Security Key (FIDO2 and U2F)?
A security key is a physical second step for signing in. You plug it in or tap it on your phone, and it proves to the website that you’re holding the key. Unlike a code sent by text, it also checks that you’re on the real website, so a fake login page can’t trick it into working.
You’ll see two standards on the box:
- FIDO U2F is the original standard. You type your password, then tap the key as a second step.
- FIDO2 (WebAuthn) is the newer one. It adds passkeys, so some sites let you sign in with the key alone, with no password.
Every key in this guide supports both. Yubico says its basic Security Key series “Supports FIDO2/WebAuthn and FIDO U2F” (Yubico). The listings say the basic keys do not support one-time passwords. That’s the main reason to pay more for a YubiKey 5.
Passkey vs. Security Key
These terms get mixed up, so here’s the difference, based on the FIDO Alliance, the group behind the standards:
- A passkey is a sign-in credential that replaces your password. It can be stored on your phone, your computer or a hardware key.
- Synced passkeys are copied between your devices through a cloud service, like your phone’s password manager.
- Device-bound passkeys never leave a single device. A hardware security key holds this kind, and the FIDO Alliance describes them as offering the “highest security assurance.”
In short: passkeys on your phone are already a big upgrade over passwords. A security key adds a copy that can’t be synced or copied off the device, and it works as a backup if you lose your phone.
Still deciding between passkeys, passwords and a hardware key? Our side-by-side guide covers passkey vs password vs security key, including which to use for your email and bank.
The 5 Yubico Keys Compared
| Key | Connects by | Sign-in methods | Best for |
|---|---|---|---|
| Yubico Security Key C NFC | USB-C + NFC | FIDO2, U2F | Most people, iPhone 15 and later, Android, newer laptops |
| Yubico Security Key NFC | USB-A + NFC | FIDO2, U2F | Older laptops and desktops with USB-A ports |
| YubiKey 5C NFC | USB-C + NFC | FIDO2, U2F, OTP, OATH, smart card, OpenPGP | Work accounts and apps that don’t support passkeys yet |
| YubiKey 5 NFC | USB-A + NFC | FIDO2, U2F, OTP, OATH, smart card, OpenPGP | The same extras for USB-A computers |
| YubiKey 5Ci | USB-C + Lightning | FIDO2, U2F, OTP, OATH, smart card, OpenPGP | iPads and older iPhones with a Lightning port |
Our Picks
1. Yubico Security Key C NFC: Best for Most People
The Yubico Security Key C NFC is the simplest way in. The listing says it works with Google, Microsoft and Apple accounts, connects by USB-C or by tapping your phone, and needs no batteries or app. It handles passkeys and FIDO2/U2F, but not one-time codes. It’s sold by Yubico and had a 4.3-star average from 2,785 ratings when we checked on October 10, 2026.
Pick it if: you want to protect your email, Apple Account or Google account and your laptop or phone has USB-C.
2. Yubico Security Key NFC: Best for USB-A Computers
The Yubico Security Key NFC is the same basic key with a USB-A plug, for older laptops and desktops. You can still tap it on your phone over NFC. It had a 4.4-star average from 2,050 ratings when we checked.
3. YubiKey 5C NFC: Best for Work and Power Users
The YubiKey 5C NFC adds everything the basic key lacks. Its listing lists FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, smart card (PIV) and OpenPGP. In plain English, it can also hold one-time codes for accounts that don’t support passkeys yet, and work with company systems that use smart card login. It had a 4.5-star average from 7,448 ratings when we checked.
Prefer USB-A? The YubiKey 5 NFC is the USB-A version, with a 4.6-star average from 12,797 ratings when we checked. It’s the key we also cover in our privacy gadgets guide.
4. YubiKey 5Ci: Best for iPads and Lightning iPhones
The YubiKey 5Ci has two plugs, USB-C on one end and Lightning on the other, and the same features as the YubiKey 5 series. It has no NFC, so you always plug it in. That matters for iPads: Apple says NFC security keys work only with iPhone. It had a 4.4-star average from 2,373 ratings when we checked.
Security Keys for iPhone
Apple lets you protect your Apple Account with security keys. According to Apple Support:
- Your devices need iOS 16.3, iPadOS 16.3 or macOS Ventura 13.2 or later, and two-factor authentication must be on.
- You must add at least two FIDO Certified keys, and you can add up to six.
- NFC keys connect with a tap and work only with iPhone. USB-C keys work with iPhone 15 and later and most Macs. Lightning keys work with iPhone 14 and earlier.
- Security keys aren’t supported for child accounts or Managed Apple Accounts.
So for most iPhone owners, two Yubico Security Key C NFC keys are enough: tap them on the iPhone and plug them into a USB-C Mac.
Do You Actually Need One?
Not everyone does. If you already use passkeys or an authenticator app, you’re well protected against most attacks. A security key makes the most sense if:
- Your email is the key to everything. Your inbox can reset almost every other password. That’s why we recommend locking it down first before connecting it to an AI agent like Meta Muse.
- You link your bank to apps. If services like Plaid connect your bank to other apps, protecting the accounts behind them matters more.
- You’re a likely target. Google’s Advanced Protection Program, built for people with “high visibility and sensitive information,” requires a passkey or a security key.
- Your job requires it. Many workplaces issue keys for company accounts.
How to Set Up a Security Key Without Locking Yourself Out
- Buy two keys and register both on every account. Keep the spare at home in a safe place.
- Save your backup codes. Most accounts give you one-time recovery codes. Print them or store them in your password manager.
- Start with your email. Then add your Apple Account or Google account, your password manager and your bank if it supports keys.
- Check other sign-in options. If a weaker method like text-message codes stays switched on, attackers may try that instead. Turn it off where the account allows it.
- Set a PIN if asked. Some sites ask you to set a PIN for the key so a lost key can’t be used on its own.
Our Verdict
For most people, two Yubico Security Key C NFC keys are the best value: they cover passkeys and FIDO2 sign-in on Google, Microsoft and Apple accounts, and work with USB-C and NFC phones. Pay more for a YubiKey 5C NFC only if you need one-time codes or work features. Whatever you choose, register a backup key and keep your recovery codes safe. Check the current price before you buy.
Want the full playbook? Our privacy ebooks go deeper on surveillance, data brokers and protecting your accounts.
Frequently Asked Questions
What is a FIDO U2F security key?
FIDO U2F is the original standard for physical security keys: you sign in with your password, then tap the key as a second step. Newer keys also support FIDO2, which adds passkeys. Every Yubico key in this guide supports both.
Is a passkey the same as a security key?
Not quite. A passkey is a sign-in credential that replaces your password. It can live on your phone or computer and sync through the cloud, or stay on a hardware security key. A security key is the physical device that can hold passkeys that never leave it.
Which security key works with iPhone?
Apple supports FIDO Certified keys for your Apple Account on iOS 16.3 or later. NFC keys work by tapping any supported iPhone, USB-C keys plug into iPhone 15 and later, and Lightning keys fit iPhone 14 and earlier. Apple requires at least two keys.
What happens if I lose my security key?
If you registered a second key, use it to sign in and remove the lost one. That’s why Yubico and Apple both push you to have two. Also keep your account’s backup codes somewhere safe.
Is the cheaper Security Key C NFC good enough?
For most people, yes. It handles passkeys and FIDO2 sign-in for Google, Microsoft and Apple accounts. You only need a YubiKey 5 if an account or work system needs one-time codes, smart card login or OpenPGP.
Do I need a security key if I already use passkeys?
Not necessarily. Passkeys on your phone already resist phishing. A hardware key adds a copy that never syncs to the cloud, and it can serve as a backup if you lose your phone. It’s most useful for your email and for high-risk accounts.
Sources
- Apple Support: About Security Keys for Apple Account
- FIDO Alliance: Passkeys
- Yubico: Security Key Series
- Google: Advanced Protection Program
- Product listings for the five keys above, checked October 10, 2026
