signzy

API Marketplace

downArrow
Logo
Responsive
Decorative line

YubiKey (hardware security token)

Overview

A YubiKey is a hardware security token developed by Yubico that provides strong two-factor, multi-factor, and passwordless authentication. It connects via USB, NFC, or Lightning to securely verify a user’s identity without relying solely on passwords. YubiKeys support authentication standards like FIDO2, U2F, OTP, and smart card (PIV), making them versatile across applications.
In compliance and financial services, YubiKeys are used by banks, fintechs, and enterprises to protect sensitive systems, secure customer access, and meet regulatory requirements for strong authentication, such as the EU’s PSD2 Strong Customer Authentication (SCA). Unlike SMS or app-based codes, hardware tokens like YubiKey are resistant to phishing, SIM-swap attacks, and malware interception, ensuring higher levels of account security and data protection.

FAQ

What is a YubiKey used for?

It provides secure, hardware-based authentication for logins, systems, and financial apps.

Why is it better than OTPs?

It resists phishing, SIM swaps, and replay attacks by using public-key cryptography.

Who uses YubiKeys?

Enterprises, banks, and regulators for compliance-sensitive access control.

What are compliance benefits?

It satisfies strong authentication rules under PSD2, NIST, and other frameworks.