Yubico Product Documentation
YubiKeys
YubiKeys are hardware authentication devices that protect user access to computers, networks, and online accounts and services through phishing-resistant multi-factor authentication and passwordless login.
YubiKey as a Service
YubiKey as a Service offers a flexible and cost effective way to adopt modern cybersecurity at scale and protect the workforce, suppliers, and end customers. Order and distribute YubiKeys efficiently and rapidly using the Customer Portal user interface, and the YubiEnterprise API.
Use FIDO Pre-reg and YubiEnroll, part of YubiKey as a Service - Enrollment, to streamline management of pre-enrolled YubiKeys for end users, on their path to stronger security.
- Customer Portal User Guide & Release Notes [HTML] [PDF]
- YubiEnterprise Services User Guide (legacy) [PDF]
- YubiEnterprise API Reference [HTML]
- FIDO Pre-reg with Okta - Integration Guide [HTML] [PDF]
- FIDO Pre-reg with Microsoft - Integration Guide [HTML] [PDF]
- YubiEnroll User Guide & Release Notes [HTML] [PDF]
- YubiEnroll with Okta - Quick Start Guide [PDF]
- YubiEnroll with Microsoft - Quick Start Guide [PDF]
Apps & Tools
Yubico Authenticator is a desktop and mobile application that allows end users to manage their YubiKeys and perform common operations, such as generating and displaying OATH two-factor authentication codes, managing the FIDO PIN, and performing a factory reset.
The ykman CLI is an advanced command line tool for desktop that provides comprehensive YubiKey management and configuration capabilities across all YubiKey applications.
The Yubico PIV tool is used for interacting with the Personal Identity Verification (PIV) application on a YubiKey.
The YubiKey Minidriver (YKMD) enables integration of the YubiKey’s PIV smart card capabilities with Windows, unlocking functionality such as certificate enrollment, management of YubiKey smart card PINs, and smart card authentication on Windows devices.
YubiHSM
YubiHSM is a Hardware Security Module (HSM) device that secures modern infrastructure, including servers. It provides advanced protection for sensitive data, like cryptographic keys, digital certificates, and passwords, as well as code signing operations.
SDKs & Libraries
Yubico provides a range of desktop and mobile SDKs that allow developers to build YubiKey functionality into custom applications.
java-webauthn-server is a server-side WebAuthn library for Java that provides implementations of relying party operations for developers wanting to create their own FIDO2/WebAuthn server.
python-fido2 is a server-side and client-side library for Python that provides functionality for communicating with FIDO devices over USB and verifying attestation and assertion signatures.