Yubico YubiKey 5C NFC

Enabling multifactor authentication (MFA) is the best thing you can do to prevent attackers from taking over your online accounts. A hardware security key like the $55 Yubico YubiKey 5C NFC provides lots of security for your online routine, and it does so without moving parts, batteries, or even an internet connection. That said, the 5C NFC is little expensive, and its wide range of supported authentication protocols may not be necessary for most users. With that in mind, we recommend the highly affordable and easy-to-use Editors' Choice award winner in the category, the $29 Yubico Security Key C NFC.

Exploring YubiKey's 5 Series

The YubiKey 5C NFC is one of several devices in the YubiKey 5 series. The keys in this series all communicate differently with your devices. The 5Ci, for instance, has Apple Lightning and USB-C connectors. The 5 NFC has a USB-A connector and can communicate wirelessly via NFC. The 5C NFC, reviewed here, has a USB-C connector and NFC capabilities, so it's capable of communicating with just about any device, regardless of brand, making it quite versatile.

(Credit: Yubico)

How Much Does YubiKey 5C NFC Cost?

The YubiKey 5C NFC is $55, considerably more than the Editors' Choice award-winning Yubico Security Key C NFC, which is just $29. Pricing of the rest of the YubiKey 5 series varies. The double-headed 5Ci costs $75 and the 5 NFC is $50. Notably, the $60 5 Nano is only for USB-A devices, and the $65 5C Nano is just for USB-C ports.

(Credit: Kim Key)

The 5C is less expensive than the two Nano devices, but it's not the most budget-friendly option from Yubico. The Security Key line consists of affordable, consumer-level options, including the Security Key, which is a $25 USB-A device that supports two kinds of authentication protocols: FIDO2/WebAuthn and FIDO U2F. The 5 Series keys support a more diverse set of protocols, which we'll address next.

YubiKey Key 5 Series Authentication Standards

The primary use for a hardware security key is for second-factor authentication. That means after you've entered your username and password to log in, a website will prompt you to plug your hardware security key into the device. The device then uses a protocol to authenticate your identity. The YubiKey 5C NFC supports the following authentication protocols: WebAuthn, FIDO2 CTAP1, FIDO2 CTAP2, Universal 2nd Factor (U2F), Smart card (PIV-compatible), Yubico OTP, OATH – HOTP (Event), OATH – TOTP (Time), OpenPGP, and Secure Static Passwords. As mentioned above, the less-expensive Yubico Security Key NFC—and some competitors—only support the tap-to-authenticate form of MFA.

Access to a diverse set of protocols makes the YubiKey 5C NFC great for business users. The key works with many enterprise-level services, including AWS Identity and Access Management (IAM), Duo Security, Forgerock, Idaptive, Microsoft Azure AD, Okta, OneLogin, and Ping Identity.

You can use a hardware security key to log into your social media accounts and email accounts, too. Apple, Google, Meta, and Microsoft all allow account sign-ins using a hardware security key.

YubiKey 5C NFC Design and Build

The YubiKey 5C NFC is made of sturdy black plastic with a textured finish. It's pretty small—just a little shorter than a house key and about the same thickness. The metal-reinforced opening at the top should help it last for a long time on a keyring.

(Credit: Kim Key)

With no batteries and no moving parts, the YubiKey 5C NFC is durable and water-resistant. Its single interface is a gold disk emblazoned with a Y. The disk responds to your tap but is not a fingerprint reader. The 5C NFC doesn't do biometric reading.

As a security precaution, YubiKey firmware is not upgradable by users. This protects against attack, but it also means that anyone interested in hacking a YubiKey to add custom capabilities will likely be stymied. It also means that if you're an existing YubiKey user, you must buy a new key to experience any new features. It's inconvenient and expensive, but such is the nature of many security tools.

The company recently upgraded the firmware to add on-device storage for 100 passkeys (up from 25), 64 OATH seeds (previously 32), 24 PIV certificates, and 2 OTP seeds. It's a reasonable amount of storage for the average enterprise user. The Yubico Security Key stores 100 passkeys. If you need more storage, Google's Titan Key can hold up to 250 passkeys.

Hands On With the YubiKey 5C NFC

(Credit: Kim Key)

We tested the 5C NFC using Facebook, which supports logins using hardware security keys. To get started, we logged into a test account and visited the Password and Security section. From there, we clicked on two-factor authentication and reentered the password. We then chose the security key authentication option, plugged in the YubiKey 5C NFC to the test computer's USB-C port, and completed the key registration process.

(Credit: Meta/PCMag)

The process took less than five minutes. YubiKeys can also completely replace password logins in some instances, like logging into a social media profile. After adding the YubiKey 5C NFC to our Facebook account and telling the platform that it's a trusted device, we were able to login again, this time only using the hardware security key, no username or password needed.

We also successfully added MFA to a Google account while using a Samsung Galaxy A71 5G. That process was a bit tricky, though, as the Chrome browser on the Android phone failed to authenticate the device using NFC but worked when the key was plugged in to the USB-C port.

You can use the YubiKey 5C NFC to generate time-based one-time password codes (TOTP), too. Currently, you can store TOTP data for up to 64 websites. You can also configure a YubiKey 5 key to work as a PIV-compatible smart card.

Verdict: The YubiKey 5C NFC Is Excellent for Experts

Yubico's YubiKey 5C NFC does just about everything that you could possibly want a multifactor key to do. Its best features are its USB-C connector and NFC capabilities, which let it communicate with just about any combination of devices you may have. If you're the curious, tinkering type, the versatility of the YubiKey 5 series makes it an irresistible choice. If you're a somewhat casual user who is looking for the protection a hardware security key provides, you're better served by Yubico Security Key NFC, our Editors' Choice winner. It costs far less than the YubiKey 5C NFC and is easy to use. Its one drawback for business users is that the device only supports the tap-to-authenticate feature, but most people who are using the device at home will only need that form of authentication.

Max Eddy contributed to this review.