Product image supplied by the brand
In this guide
A hardware security key is the one purchase in personal account security that a password manager cannot substitute for. The manager stores secrets; the key proves possession of a physical object, and a phishing page cannot ask for something it cannot receive. The YubiKey 5 NFC is Yubico's standard-issue version of that object: a USB-A stick 45 millimeters long with an NFC antenna for phones, listed at $58 on Yubico's US store and shipping with firmware 5.8.
The 5 in the name means the multi-protocol tier. Where the $29 Security Key NFC speaks FIDO only, this one also stores time-based one-time codes, acts as a PIV smart card for Windows and macOS logins, holds OpenPGP keys and generates Yubico's own OTP strings. Whether any of that is worth the extra $29 is the entire buying question, and for a lot of people the answer is no.
Our verdict
A durable, batteryless key that covers passkeys, one-time codes and smart-card logins in one $58 device; the USB-A plug is the deciding spec, since NFC handles phones but a laptop with only Type-C sockets will need an adapter or the 5C NFC at the same price.
- A good fit for
- A person locking down a Google or Microsoft account, a password manager and a few high-value logins, who has USB-A ports on the desk and an NFC phone in the pocket.
- We would skip it if
- Every computer you use is USB-C only, or you only need FIDO2 passkeys and can spend $29 on the Security Key NFC instead.
Reasons to consider it
- Supports FIDO2/WebAuthn passkeys, U2F, Yubico OTP, OATH-TOTP/HOTP, PIV smart card and OpenPGP on one key
- Firmware 5.8 with 100 passkey slots, 64 OATH slots and 24 PIV certificate slots
- IP68, crush-rated to 25 N·m, no battery, and 45-day returns for consumers buying from yubico.com
The compromises
- USB-A only; USB-C machines need an adapter or the separate 5C NFC model
- Firmware is fixed at manufacture and cannot be updated, so new protocol features mean a new key
- Hardware coverage runs one year, and a lost key without a registered backup means account recovery the hard way
What we have not verified: The key was not registered or used here; NFC reliability with specific phone cases, touch-contact sensitivity, and how the plastic wears on a key ring were not assessed.
The things in this guide
A closer look at the products, who they may suit, and what to check before buying.
YubiKey 5 NFC
One $58 key covers passkeys, TOTP codes through the Yubico Authenticator app, smart-card login and OpenPGP, tap-to-authenticate on NFC phones, and survives water, dust and a key ring without a battery.
Before you buy: The plug is USB-A, the firmware never changes after purchase, and the whole scheme only works if a second key is registered everywhere the first one is.
Price checked September 11, 2026. Retailer prices can change.What the multi-protocol tier buys you
Yubico's specification for the 5 NFC lists FIDO2 at certification level L2 with CTAP 2.1, FIDO U2F, PIV smart card, OpenPGP, OATH-TOTP and OATH-HOTP, Yubico OTP, challenge-response and a static password. The numbers that matter for daily use are the slots: 100 passkeys, 64 OATH credentials, 24 PIV certificates and two OTP seeds. A hundred passkeys is more than most people will register in the life of the key, so slot count is no longer a reason to hold back from using it everywhere passkeys are offered.
The $29 Security Key NFC covers the FIDO half of that list and nothing more, and for someone whose accounts are Google, Microsoft, a password manager and a bank, FIDO is usually the whole job. Where the 5 NFC pulls ahead is OATH: it can hold your authenticator-app codes and display them through Yubico Authenticator on a phone or desktop, which makes the codes portable between devices without trusting a cloud backup. PIV and OpenPGP are for people who log in to computers with certificates or sign commits; if those words mean nothing to you, buy the cheaper key.
Three grams, no battery, fixed firmware
The key measures 18 by 45 by 3.3 millimeters and weighs 3 grams, with a USB-A 2.0 plug on one end, a hole for a key ring on the other and a gold touch contact on the face. Yubico rates the body at IP68 for water and dust, crush resistance up to 25 N·m, more than 100,000 USB insertions and 500,000 write and erase cycles, and it is built from glass-fiber reinforced plastic with no moving parts. Power comes from the port or the phone's NFC field, so there is nothing to charge and nothing to replace.
One design decision cuts the other way. Yubico's technical manual states that once a key is programmed at the factory its firmware cannot be updated to another version, altered or removed. Units on sale now ship with 5.8, which adds CTAP 2.3 features such as secure payment confirmation and the PRF extension, but a key bought two years ago stays on the firmware it had. That is a security argument as much as a limitation, since nothing can flash malicious code onto it, but it means protocol upgrades arrive only as new hardware.
The plug is the real choice
The 5 NFC and the 5C NFC are the same key inside and cost the same $58; the only difference is a USB-A plug on one and a Type-C plug on the other. That makes the decision about your hardware, not the product. A desktop with rectangular ports and a phone with NFC is the ideal 5 NFC household, because the phone never touches the plug at all and the computer always has a matching socket.
A laptop with only Type-C sockets turns the USB-A key into an adapter exercise, and adapters are exactly the kind of small object that goes missing when you need to log in. If your primary machine is a recent MacBook or a thin Windows laptop, buy the 5C NFC instead and let NFC handle the phone. Buying both, one of each plug, is a reasonable way to cover the backup-key requirement and the port question in a single order.
Forty-five days to change your mind, and why one key is not enough
Consumers who buy directly from yubico.com can return a key within 45 days of receipt for a full credit, after requesting an RMA through the support form and getting the item back to Yubico no later than 30 days after the authorization. Orders shipped inside the US and Canada get free shipping at $100 and above, which a single $58 key does not reach. Hardware defects are covered for one year from delivery, with repair, replacement or a refund at Yubico's option, and the same term applies through authorized resellers.
None of that helps with the failure that matters most, which is losing the key. A security key has no recovery code of its own, so every service you register it with should also have a second key registered, or you are one dropped key ring away from a locked account. Two 5 NFCs cost $116; a 5 NFC plus a $29 Security Key NFC as the drawer backup costs $87 and covers FIDO logins on both. Pairing the key with a password manager, as our Bitwarden Premium review noted, is the intended arrangement: the manager holds the passwords, the key gates the manager and the email account behind it.
Skip it if FIDO is all you need
If your list of accounts to protect is a Google or Microsoft login, a password manager and a couple of sites that support passkeys, the $29 Security Key NFC does the same phishing-resistant job with the same plug, the same NFC and the same firmware line, and the $29 you save pays for most of the backup key. The 5 NFC is for people who will actually use OATH codes on the key, certificate logins or OpenPGP, and those are a minority of buyers.
Pass as well if you are not prepared to buy and register two keys. A single key is a single point of failure, and the account-recovery paths that get you back in without one are slow, sometimes manual, and occasionally impossible. Also hold off if every port you own is USB-C; the 5C NFC costs the same and removes the adapter from the chain.
How we put this together
Built from the product pages and listings below, without test scores or results we have not measured. Specifications and prices change, so check the original page for the exact model, current price, delivery, and returns.
- Yubico: YubiKey 5 NFC product page (opens in a new tab)
- Yubico: Security Key NFC by Yubico product page (opens in a new tab)
- Yubico: YubiKey 5C NFC product page (opens in a new tab)
- Yubico: Buying and shipping information (opens in a new tab)
- Yubico: Consumer sale and license agreement for the Americas (opens in a new tab)
- Yubico: YubiKey Technical Manual, Firmware Overview (opens in a new tab)
