For first-time buyers — the basics of YubiKey, what's different across the lineup, and our model recommendations, all in one page with a comparison table.
Last updated: May 2026
📢 Affiliate disclosure.
This article contains Amazon affiliate links. As an Amazon Associate, Arpass earns from qualifying purchases. Our reviews and rankings are not influenced by commission. Prices fluctuate — check the seller page for the current price.
What is a YubiKey?
A YubiKey is a USB / NFC security key made by Yubico, a US company. It's a small physical device — about the size of a fingertip — that you plug into a PC or tap on a phone to prove "this is really you."
Passwords get stolen and reused. With a YubiKey, the physical device itself is the key. The secret inside cannot be extracted, making it extremely resistant to phishing and password leaks.
What can a YubiKey do?
A single YubiKey covers several uses. The main ones are:
Passkeys / FIDO2 / WebAuthn — passwordless login or strong two-factor authentication on Google, Microsoft, Apple, and many other services. This is the biggest current use case.
Two-factor authentication (OTP) — generates one-time passwords for supported services.
OpenPGP — encrypt and sign emails or files, and sign Git commits.
PIV (smart card) — corporate PC login and certificate-based authentication.
If you only want to strengthen passkey-based 2FA, you use just a fraction of the feature set. Developers and people who do encryption work use OpenPGP and PIV too. How far you'll go is what decides the model choice below.
The lineup — three main lines
For home and personal use, three lines matter:
1. YubiKey 5 series (all-in-one)
The flagship line. Passkey, OTP, OpenPGP, PIV — all included. Variants include the "5C NFC" (USB-C + NFC), "5 NFC" (USB-A + NFC), and "5Ci" (Apple Lightning). Price: typically around $50–70 USD.
2. Security Key series (budget)
Limited to FIDO2 / passkey / U2F — no OpenPGP, no PIV. Price: typically around $25–35 USD. The right pick if you only need passkey and 2FA.
3. FIPS series (compliance)
Compliant with the FIPS 140 cryptographic module standard, for government, finance, and other compliance-driven organizations. Typically $150+. Not needed for personal use.
Comparison table
Feature
YubiKey 5C NFC
YubiKey 5 NFC
Security Key (budget)
USB
USB-C
USB-A
USB-A / USB-C
NFC (phone)
Yes
Yes
Yes
Passkey / FIDO2
Yes
Yes
Yes
OpenPGP
Yes
Yes
No
PIV (smart card)
Yes
Yes
No
Price (approx.)
$50–70
$50–70
$25–35
Best for
USB-C era, all-rounder
USB-A PCs
Passkey-only users
So which one should you buy?
If you're undecided, this simple rule works:
Want one key for modern Macs / phones, built to last → YubiKey 5C NFC. USB-C + NFC pairs best with current devices.
You use USB-A PCs a lot → YubiKey 5 NFC. Same internals as 5C NFC, just USB-A.
You only need passkey and 2FA → Security Key (budget). Cheapest option if you'll never use OpenPGP or PIV.
Recommended products
Yubico YubiKey 5C NFC
USB-C + NFC, all-rounder. Works great with modern Macs, iPhones, and Android. Handles everything from passkey to OpenPGP. The best single recommendation for most people.
Prices fluctuate — check the listing for the current price.
Buying tips
Buy at least two. If you only have one and it's lost or breaks, you can be locked out. Keep a spare in a separate safe place. Arpass's YubiKey-only mode also requires at least two for this reason.
Buy from authorized channels. Parallel imports exist. Amazon's official Yubico listings or authorized resellers are safer.
FIPS isn't needed for personal use. It's significantly more expensive and gives you nothing extra unless you have a compliance requirement.
Summary
First time? YubiKey 5C NFC. USB-A workflow? 5 NFC. Passkey-only? The Security Key (budget). And always buy two. That's the entire decision tree.
Arpass can manage passwords with YubiKey alone. No master password, no recovery paper — just touch a registered YubiKey to open your secure drive. See the help guide for the YubiKey-only mode.
ARPASS
→ Open Arpass