お知らせ • Jun 05
Yubico Achieves FIPS 140-3 Validation For YubiHSM 2 FIPS Yubico announced that YubiHSM 2 FIPS has achieved FIPS 140-3 validation with Certificate #5302, published by the National Institute of Standards and Technology Cryptographic Module Validation Program. YubiHSM 2 FIPS delivers high-assurance cryptographic protection for keys, secrets and non-human identities in modern enterprise and operational technology environments. YubiHSM 2 FIPS is purpose-built to protect cryptographic keys and perform secure cryptographic operations inside a tamper-resistant hardware security module, helping organizations reduce exposure to key theft, credential compromise and unauthorized access. As U.S. Government agencies and regulated enterprises accelerate Zero Trust adoption, the FIPS 140-3 validation of Yubico’s YubiHSM 2 Cryptographic Module under NIST CMVP Certificate #5302 strengthens a critical hardware-backed foundation for modern identity, data protection and AI security. YubiHSM helps organizations protect cryptographic keys, certificates and credentials while supporting continuous verification, least-privilege access, and cryptographically rooted trust for mission-critical systems and emerging AI agent workflows. The YubiHSM 2 FIPS 140-3 validated module meets Overall Level 3 security requirements and provides advanced physical security protections for safeguarding cryptographic material and sensitive operations. The validation aligns with the latest FIPS 140-3 cryptographic framework and international ISO/IEC 19790 standards, helping organizations meet evolving global security and compliance expectations. お知らせ • Mar 30
Yubico Appoints Poupak Modirassari Enbom as Chief Marketing Officer Yubico announced the appointment of Poupak Modirassari Enbom as Chief Marketing Officer. Enbom brings deep experience in cybersecurity and identity security, having built and led global go-to-market organizations across sales and marketing. With a foundation in engineering and a track record of leading cross-functional business initiatives, she brings a 360-degree perspective on the business that enables organizations to scale securely while staying grounded in business outcomes. At Yubico, Enbom will lead the company’s global marketing and business development organizations, aligning strategy, leverage sales and execution to accelerate demand and grow revenue. As a core part of its go-to-market strategy, she’ll focus on strengthening executive engagement and advancing Yubico’s leadership in hardware-backed authentication and passwordless adoption to protect the digital world from AI-powered adversary-in-the-middle phishing. お知らせ • Mar 23
Yubico Expands Enrollment Services For YubiKeys Yubico, creator of the YubiKey, the most secure passkey, at RSA Conference announced the expansion of its Enrollment services – available exclusively through YubiKey as a Service – to include support for simple and secure in-the-field enrollment of YubiKeys for Microsoft and PingID environments. These expanded enrollment options help customers fast track to phishing-resistance and passwordless, and more easily customize and secure their EntraID and PingOne PingID registration and account recovery experiences. As part of expanding the scope of Enrollment services, Yubico is introducing a new Enrollment app: YubiKey as a Service - Enroll, currently in Limited Early Access for Android users. With feedback from enterprise customers during this phase, the final offering will be available as both a standalone app and an SDK. These capabilities will provide enterprises with the components required to build a custom experience for IT and HR teams for streamlined user onboarding. Organizations will be able to choose the enrollment approach that best fits their deployment model and needs: a fully managed enrollment service with pre-configured YubiKeys, or an enrollment app or SDK, used onsite, that allows IT and non-technical staff to easily enroll YubiKeys on behalf of users. FIDO Pre-reg: A fully managed enrollment service. A turnkey service that delivers pre-enrolled YubiKeys directly to employees, enabling passwordless login from day one. Keys are factory-programmed with user credentials and shipped globally, reducing operational overhead for IT teams. FIDO Pre-reg is currently generally available with Okta, Ping Identity and Versasec, and in Early Access with Microsoft. YubiKey as a Service - Enroll app and SDK: Instant registration or recovery for YubiKeys. Yubico’s enrollment service options also offer organizations a new, intuitive app called YubiKey as a Service - Enroll to quickly set up YubiKeys on behalf of users, such as new hires or existing employees. With an accompanying SDK, organizations will be able to gain the tools to integrate user enrollment, registration and account recovery directly into their existing business applications. Now IT teams, HR departments, and onboarding teams can securely prepare and assign YubiKeys on behalf of users, enabling seamless onboarding and rapid deployment of phishing-resistant authentication faster and at greater scale than ever before. This service is now available in Limited Early Access for Microsoft and Ping Identity customers. YubiEnroll: Command line tool to enroll YubiKeys. A free option that allows IT teams or partners to enroll YubiKeys on behalf of users and distribute them directly. YubiEnroll is a command line interface tool meant purely for technical teams to enroll YubiKeys on short notice or in regions where turnkey delivery services may not be available. Key capabilities of the new Enrollment services include: Secure setup from anywhere: YubiKeys can be prepared and assigned without complex IT configuration, with secure backend provisioning handled by Yubico. End-to-end encrypted enrollment: All information used to configure keys is securely encrypted, protecting against interception or tampering. Flexible delivery options: Organizations can ship keys directly or leverage logistics partners and distributors for global fulfillment. Full visibility and auditing: Enrollment and activation events are automatically tracked to support compliance and operational oversight. Easy reassignment: Keys can be securely reset and reassigned when employees change roles or leave the organization. By combining flexible enrollment options with hardware-backed phishing resistance, YubiKey as a Service enables organizations to quickly deploy secure authentication across distributed workforces while maintaining strong governance and operational control. The YubiKey as a Service - Enroll app is in Limited Early Access for Android users, and customer feedback will shape the final offering which will also include an SDK option. お知らせ • Feb 10
Yubico Announces Availability of the YubiKey 5 CCN Series, First Hardware Security Key to Secure 'ens Alta' Rating in Spanish National Cryptologic Center (CCN)'S CPSTIC Catalogue Yubico announced the availability of the YubiKey 5 CCN Series in Spain. Tailored specifically for the Spanish market, the series is now officially listed in the Spanish National Cryptologic Centre (CCN) Catalogue of Information and Communication Technology Products and Services. Following a rigorous LINCE evaluation, the Yubico 5 CCN Series has been granted 'ENS Alta' status, the highest security rating offered by the certification. This milestone makes the YubiKey the first hardware security key available in the CPSTIC Catalogue, providing a trusted, high-assurance solution for the Spanish government, public sector organizations, and critical infrastructure providers. The cybersecurity landscape in Spain is rapidly evolving, with over 100,000 attacks detected in 2024 alone. As the NIS2 Directive and the Spanish National Security Scheme "ENS" enforce stricter mandates for multi-factor authentication (MFA), the YubiKey 5 CC NIS2 Series provides a streamlined path to compliance. Accelerated Procurement: As a listed product in the CPSTIC Catalogue, Spanish organizations can now procure YubiKeys without the need for the extensive and prolonged follow-up audits typically required for non-catalogued products. highest Security Assurance: The 'ENS Alta' designation recognizes the YubiKey as a premier choice for protecting the nation's most sensitive data and essential services. European sovereignty sovereignty: Yubico's secure European manufacturing process and supply chain ensure the highest level of integrity for both public and private sector deployments. The YubiKey 5 CCN series leverages the latest YubiKey 5.7.4 firmware, delivering robust, hardware-based defense against AI-driven threats and sophisticated phishing attacks. Key features include: Versatile Form Factors: Available in USB-A and USB-C with contactless NFC capability to support a diverse, mobile workforce. Expanded Capacity: Stores up to 100 passkeys and 24 PIV/Smart Card certificates on a single device. Multi-Protocol Support: Ensures seamless integration across legacy systems and modern cloud environments, supporting the transition to a Zero Trust architecture. お知らせ • Jan 27
Yubico AB Empowers Organizations to Accelerate Hardware Passkey Deployments At Scale with Self-Service Workforce Ordering Yubico AB announced a significant expansion of YubiKey as a Service - introducing new capabilities that make modern organizations more agile and cyber resilient. With new Self-Service Ordering of YubiKeys enabled through a more streamlined Customer Portal, organizations can now easily deliver phishing-resistance company-wide. Designed to enable the rollout and management of YubiKeys at a global scale, these enhancements enable organizations to move more quickly towards passwordless authentication with hardware passkeys. Self-Service Ordering: Accelerating Modern Workforce to Phishing-Resistance in the Age of AI-powered Cyber Threats: The new Self-Service Ordering capability empowers employees and partners to self-service their own YubiKey needs. IT administrators can now send email invitations to individuals or groups, allowing users to choose their preferred form factor and enter their own shipping details through a custom-branded web page. The tool offers several new advantages for customers including: Choice and Autonomy: Users can select the YubiKey models that best fit their specific devices, with direct shipping to home or office locations across the U.S., Canada and Europe. Reduced Operational Overhead: By shifting address collection and order capture to the end user, organizations can dramatically accelerate adoption while reducing the support burden on internal help desks. Customized Experience: Organizations can customize the Self-Service Ordering portal and invite emails to match their brand identity, ensuring users recognize and trust the security request. Customer Portal: A Centralized Dashboard for Global YubiKey Deployments: Available automatically with YubiKey as a Service, the new Customer Portal - formerly the YubiEnterprise Console - offers a unified, streamlined workspace that enables IT teams to efficiently manage their YubiKey deployment and gain instant visibility into deployment status, inventory and user activation. Key administrative benefits of the Customer Portal include: Unified Inventory Management: A new inventory overview provides a clear view of all purchased licenses andkeys, distinguishing between total inventory and what is currently shippable. Streamlined Operations: Admins can manage users, assign roles, and track shipment requests through a simplified "Deliver" section, ensuring hands-off rollouts that free up IT resources for strategic initiatives. Enhanced Visibility: The portal replaces confusing legacy views with dedicated sections for purchases, delivery, and self-service ordering - providing a holistic view for seamless global YubiKey management. Available exclusively through YubiKey as a Service), these new features allow organizations to seamlessly achieve phishing-resistance with hardware security keys and fast-track to an elevated security posture and a future-proofed security investment. お知らせ • Dec 17
Yubico AB Announces CEO Changes Yubico AB announced that Jerrod Chong, Yubico’s current Chief Operating Officer, has been appointed to serve as acting CEO. Mattias Danielsson will be stepping down from his role as CEO of Yubico. Jerrod Chong has extensive experience in cybersecurity and twelve years in senior leadership at Yubico. Mattias Danielsson will help ensure a smooth and orderly transition of responsibilities and will continue to be available for guidance over the next six months. Mattias Danielsson has contributed significantly to Yubico’s development as a respected leader and colleague over sixteen years. お知らせ • Oct 29
Yubico Announces Its Signature Product, Yubikeys to Best Buy Yubico announced its signature product, YubiKeys, will be available for purchase in 350 Best Buy stores across the US starting this week. Underscoring Yubico's continued mission to make the internet safer for everyone, this marks the first time Yubico's products will be widely available on retail shelves. Best Buy first introduced YubiKeys to BestBuy.com in August of 2024. This new availability in brick-and-mortar stores makes security keys tangible and even more accessible to customers, showing that strong authentication isn't just for enterprises--it's for everyone. AI-powered cyber threats have greatly heightened the risks for anyone with an online account, now being able to easily bypass outdated security at tremendous speed and scale, with personalized phishing attacks. Trusted by the world's largest brands and consumers globally, the YubiKey delivers modern, seamless passkey authentication designed for the security demands of today's internet and sophisticated cyber threats, including phishing. With the YubiKey, one can say goodbye to passwords and inconvenient multi-factor authentication (MFA) methods like SMS or app-based codes. Device-bound passkeys in YubiKeys offer one-touch security that is faster, simpler, and more reliable than traditional authentication, and serves as a critical foundation to make other passkeys more secure. Whether for work, school, personal accounts, or everyday online activities, the YubiKey provides an easy and effective way to protect digital life--from email and banking to social media and personal files. In a recent survey from Yubico, Gen Z emerged as the most susceptible demographic to phishing, with 62% reporting engagement--such as clicking a link or opening an attachment--with a phishing scam in the past year, significantly higher than other age groups. Extending security beyond the retail shelf, Yubico's partnership with Best Buy will also ensure future generation have the knowledge and tools to stay safer online. Through its Secure it Forward program, the company is collaborating with the Best Buy Foundation®? to support numerous Best Buy Teen Tech Centers®? across the United States. Best Buy Teen Tech Centers, an initiative of the Best Buy Foundation, are a network of creative, youth-centered community hubs where young people can engage with and have access to the latest technology, mentorship and professional development programs to build confidence and skills for educational and career success. Through this partnership, Best Buy Teen Tech Centers®®? will receive free YubiKeys, training guides, and hands-on learning resources to help youth protect their digital identities. By making strong security tangible and accessible now, this initiative empowers young people to build safer online habits and long-term confidence in protecting their digital lives, as they evolve from students into professionals. お知らせ • Oct 14
Yubico AB, Annual General Meeting, May 05, 2026 Yubico AB, Annual General Meeting, May 05, 2026. お知らせ • Sep 26
Yubico AB Announces Executive Appointments Yubico announced the new hires of key positions: Albert Biketi as Chief Product and Technology Officer (CPTO) and Sheryl Chamberlain as Senior Vice President, Business Development. Biketi joins Yubico as an experienced and recognized cybersecurity veteran with a diverse background encompassing management, investment, and advisory roles. Known for his expertise in scaling businesses and building strong customer relationships, Biketi has held multiple positions at companies including HP Software and Splunk most recently leading strategy and operations for Google Cloud Security. Chamberlain joins Yubico as a renowned global technology executive recognized for driving business transformation through strategic partnerships and alliances. Chamberlain brings extensive experience leveraging partnerships, business process improvement, enterprise software, business development, and solution selling for companies including Dell Technologies, Capgemini, Medidata Solutions (a Dassault Systèmes Company), Coupa Software and The Linux Foundation. Most recently, Chamberlain served as managing director for the IBM alliance at Palo Alto Networks. お知らせ • May 20
Yubico More Than Doubles Global Reach of YubiKeys for Enterprises to 175 Countries and 24 Territories, Simplifying Passwordless at Scale Yubico announced the expanded availability of YubiKey as a Service to all countries in the European Union (EU). This allows organizations to be more agile and flexible in their adoption of phishing-resistant YubiKeys, and builds upon the company's existing reach in markets such as the United States, Canada, Japan, Singapore, Australia, India and the UK. Additionally, the company announced the expanded availability of Yubico across 117 new locations around the world. Now totaling 199 locations (175 countries and 24 territories), this more than doubles existing delivery coverage of YubiKeys to both office and remote users in a fast and turnkey way. Roll out phishing-resistant, passwordless security just got easier for all EU countries through the expansion of YubiKey as a service. This innovative service provides enterprises with flexibility and simplifies the acquisition and fast roll out of phishing-resistant multi-factor authentication (MFA) with impactful cost savings. The Yubico Enrollment Suite, available exclusively through this service, now enables enterprises in these markets to accelerate passwordless adoption and seamless user onboarding with pre-configured keys to their users. This includes Yubico FIDO Pre-reg for factory-programmed, pre-registered keys as well as YubiEnroll client for in-person onboarding via Okta and Microsoft Entra ID - with more identity providers (IdPs) to follow. Through these offerings, Yubico is aligning security with operational efficiency- helping organizations future-proof their workforce against evolving phishing threats. Getting hardware security keys into users' hands - anywhere - is critical and needs to be fast and easy. As part of YubiKey as aService, YubiEnterprise Delivery helps organizations achieve this by providing IT teams with powerful capabilities to easily manage the delivery of hardware security keys to users, while accelerating the adoption of strong authentication. Additionally, organizations gain critical visibility into available inventory and consumption patterns of YubiKeys to ensure identification of any gaps in protection against phishing attacks. お知らせ • May 02
Intercede Collaborates with Microsoft and Yubico to Enhance Enterprise Security with Stronger Authentication Intercede announced the launch of its latest version of MyID CMS that enables the management of Passkeys with Microsoft Entra ID. Administrators can now use the credentials management system to seamlessly manage FIDO Passkeys on devices including the Yubico YubiKey family of products, that can then be used to securely authenticate to Entra ID protected resources. The solution enables organizations to use seamless, secure authentication processes by combining the strengths of the Intercede, Yubico, and Microsoft technology platforms. By integrating Entra ID's robust FIDO2 provisioning API's with MyID CMS and YubiKeys, enterprises can now implement an end-to-end secure issuance and life cycle management solution for FIDO Passkeys, whether in Cloud or Hybrid Entra ID solutions, manage PKI and FIDO credentials on a single YubiKey, as well as support for using a Passkey as a Derived Credential. Key highlights of MyID 12.14 Entra ID Capabilities: Compliance with NIST SP800-63B digital identity guidelines; Simplified FIDO passkey issuance and lifecycle management; Manage passkeys alongside other credential types such as certificates; Applying expiry dates to passkeys - automatically revoke the credential for fixed term workers, or for temporary passkey usage; Support for passkeys as a derived credential, compliant with NIST SP800-157. The combined solution addresses growing enterprise needs for robust, flexible, and user-friendly phishing resistant authentication systems. By eliminating traditional complexity in credential management, the collaboration empowers organizations to implement more agile and secure identity verification strategies. お知らせ • Mar 06
Yubico AB to Report Fiscal Year 2024 Results on Apr 15, 2025 Yubico AB announced that they will report fiscal year 2024 results on Apr 15, 2025 お知らせ • Feb 14
Yubico AB Announces Retirement of Camilla Öberg as CFO Yubico AB announced that the Company's CFO Camilla Öberg has informed the Company that she will retire from her position as CFO in order to, going forward, focus on board assignments and other non-operational work. Camilla has been the CFO of Yubico since 2020 and will remain in her role until a replacement is appointed in order to facilitate the recruitment of a new CFO and the handover to that person. The recruitment process for a new CFO will commence immediately. お知らせ • Feb 13
Yubico AB to Report Fiscal Year 2025 Results on Feb 16, 2026 Yubico AB announced that they will report fiscal year 2025 results on Feb 16, 2026 お知らせ • Jan 21
Yubico and T-Mobile Deployment of 200,000 Phishing-Resistant YubiKeys Enhances Un-Carrier's Work Systems Security Yubico worked with T-Mobile US to deploy over 200,000 FIDO2 YubiKeys to its teams including employees, vendors and authorized retail partners in late 2023. The passwordless, device-bound passkeys replaced legacy authentication to further secure the Un-carrier's work systems and information amidst the growing escalation of cyber threats, stopping unauthorized credential use by bad actors over the last year. Enterprises and other organizations that rely on legacy multi-factor authentication (MFA) methods like passwords and one-time passwords (OTPs) can be susceptible to one of the most common tactics used by bad actors -- phishing attacks. Typically, this involves sending a fake or fraudulent email, text or other communication in an attempt to steal someone's sensitive information. With Yubico's FIDO2 security keys, T-Mobile's teams no longer have to change or remember their passwords, or type in OTP codes that could be intercepted by bad actors; they use their YubiKey to passwordlessly authenticate and verify their identity to gain access to the resources they need. These attacks not only result in billions of dollars in yearly losses for businesses but threaten the safe interconnected operation of critical infrastructure and services, from government agencies to financial institutions, factories, healthcare and human rights organizations. Yubico has pioneered enterprise hardware-based security keys since 2007, championing open authentication standards and delivering modern, device-bound passkey authentication security at scale to customers. YubiKeys support multiple phishing-resistant authentication protocols such as FIDO2/WebAuthn, U2F and Smart Card (PIV). This provides a pathway to passwordless authentication for enterprises of any size. With support for hundreds of applications and services, Yubico deliver seamless operation across all operating systems and mobile devices, are easy to use and help save time for IT help desks in resetting passwords for employees. This form of modern MFA positions enterprises to take advantage of passwordless environments across their many applications, teams and business processes, including retail environments. お知らせ • Dec 11
Yubico AB(OTCPK:YUBC.F) dropped from OMX Nordic All-Share Index Yubico AB has been removed from OMX Nordic All-Share Index お知らせ • Nov 20
Yubico Announces Yubico Enrollment Suite for Microsoft Users, a Turnkey Passwordless Onboarding Experience Yubico announced the availability of Yubico Enrollment Suite for Microsoft users, including Yubico FIDO Pre-reg and the new YubiEnroll. These solutions integrate with Microsoft’s Entra ID, helping organizations create stronger cyber resilience and provide support to further advance strategies with a Zero Trust model. The Yubico Enrollment Suite enables organizations to strengthen security standards and go passwordless with phishing-resistant multi-factor authentication (MFA) to safeguard Microsoft ecosystems. Microsoft’s recently announced Secure Future Initiative (SFI) aims to deliver strong phishing-resistant authentication solutions based on FIDO2 and CBA standards, leveraging technologies and efforts from FIDO Alliance members including Yubico and Microsoft. As part of the SFI, Microsoft also mandated MFA for all Microsoft Entra ID, Azure and other portal sign-ins. Yubico FIDO Pre-reg will enable Microsoft customers to meet the mandate requirements and provide customers using Microsoft Entra ID access to a turnkey passwordless MFA onboarding experience by receiving YubiKeys that are already enrolled for their Microsoft environment. Yubico and Okta recently released the industry’s first solution for delivering pre-registered YubiKeys for Okta users with Yubico FIDO Pre-reg, and now introduces this capability as part of a Limited Early Access availability within the Yubico Enrollment Suite for Microsoft customers using Microsoft Entra ID. Yubico FIDO Pre-reg handles all of the key delivery logistics door-to-door and reduces burden for both IT staff and end users, while the new YubiEnroll client application will now also enable organizations and Yubico partners that use Microsoft Entra ID to easily enroll YubiKeys on behalf of end users at their premises. Yubico FIDO Pre-reg is available exclusively through YubiKey as a Service. Benefits of Yubico FIDO Pre-reg include: Delivering phishing-resistance on day one, employees become phishing-resistant users throughout their employee lifecycle – including onboarding, authentication and account recovery. Empowering enterprises to enhance cyber resiliency by effectively enrolling the end user directly in the authentication platform. Eliminating critical points where they may otherwise be exposed to an attack, and removes the responsibility of help desks or users to make security decisions. Designed specifically for IT staff and administrators, YubiEnroll simplifies the process of preparing, creating and registering FIDO credentials directly with user's identity provider. Key features and benefits of YubiEnroll include support for: Available as an application for Windows, YubiEnroll is capable of enrolling a FIDO credential on behalf of a user, as well as configuring the YubiKey for use. A range of powerful features, including factory resetting YubiKeys and Security Key Series keys, setting and managing PINs (with options for forced PIN changes and minimum PIN length), as well as configuring the user verification are offered. All YubiKey and Security Key form factors are supported, whether you’re connecting via NFC or USB. Simply plug in or tap and let YubiEnroll guide user through enrollment. お知らせ • Sep 24
Yubico AB, Annual General Meeting, May 13, 2025 Yubico AB, Annual General Meeting, May 13, 2025. お知らせ • Jul 15
Straxis and Yubico Launch Secure Mobile Web App to Access Essential U.S. Military Email, Pay and Travel Services Yubico and Straxis announced the availability of a new Secure Web browsing application called MilSecure Mobile. This application can be adopted by any Defense Department (DOD) organization to enable secure access to protected DOD websites and services by service members and government employees on their personal mobile devices using the new YubiKey Secure Web feature. The United States Air Force will be the first military service to integrate the Secure Web feature into its Air Force Connect mobile app, which was launched in 2019. The integration of the Secure Web feature will be a needed upgrade to modernize its authentication technologies and practices. Yubico and Straxis have been working together since 2019 to create a secure web browsing experience to ensure that servicemembers' sensitive information is protected by using a seamless login process. Yubico and StraXis have been working together Since 2019 to create a secure web browse experience to ensure that servicembers' sensitive information is protection by using a seamless authentication process. Yubico and Singapore support multiple phishing-resistant authentication protocols such as FIDO2/WebAuthn, U2F and Smart Card (PIV), offering a bridge to passwordless authentication for enterprises and government agencies of all sizes. Yubico's solutions enable passwordless logins using the most secure form of passkey technology. YubiKeys work out-of-the-box across hundreds of consumer and enterprise applications and services, delivering strong security with a fast and easy experience. As part of its mission to make the internet more secure for everyone, Yubico donates YubiKeys to organizations helping at-risk individuals through the philanthropic initiative, Secure it Forward. The company is headquartered in Stockholm and Santa Clara, CA. お知らせ • May 15
Yubico AB Elects Jaya Baloo as New Director Yubico AB at its Annual General Meeting held on May 14, 2024, elected Jaya Baloo as new director. お知らせ • May 08
Yubico Announces Upcoming Release of Yubikey 5.7 Firmware for the Yubikey 5 Series, Security Key Series and Security Key Series - Enterprise Edition Yubico announced the upcoming release of YubiKey 5.7 firmware for the YubiKey 5 Series, Security Key Series and Security Key Series - Enterprise Edition. With a focus on enterprise needs, these updates reinforce Yubico’s commitment to providing secure, simple, and scalable authentication solutions. Security keys with firmware 5.7 will be available to purchase in late May 2024, offering enhanced features such as improved PIN complexity, enterprise attestation, and expanded passkey credentials storage. These updates empower organizations to adopt passwordless-first, modern authentication, fostering phishing-resistant users worldwide. As part of Yubico’s goal of helping enterprises raise the bar for security with greater flexibility, the company also announced the availability of Yubico Authenticator 7 which will support the upcoming YubiKey 5.7 features. To help organizations tackle this challenge, Yubico’s key updates and enhancements to the YubiKey 5 Series and Security Key Series include: Enhanced PIN complexity across all YubiKey applications Block simple patterns and common PINs at the hardware level to enable compliance with upcoming NIST requirements and corporate mandates. This includes FIDO2, PIV, and OpenPGP. Enterprise attestation Allow organizations to enforce the usage of YubiKeys that they purchased via custom programmed keys with enterprise attestation. Working in conjunction with identity providers, this capability can also facilitate the retrieval of unique identifiers during FIDO2 registration to streamline asset tracking and account recovery. FIDO2 enhancements Empower organizations to enforce compliance requirements and elevate security measures surrounding PIN usage. YubiKey 5.7 implements FIDO Client-to-Authenticator Protocol (CTAP) 2.1, embracing the latest FIDO2 protocol features such as Force PIN Change and Minimum PIN Length. Expanded passkey and passwordless storage Provide ample storage space to meet authentication needs while maintaining strong security standards. More storage for FIDO2 discoverable credentials (passkeys) and OATH one-time passwords will now accommodate up to 100 passkeys, 24 PIV certificates, 64 OATH seeds, and 2 OTP seeds at once for a total of 190 credentials. Expansion and enhancement of public key algorithms for PIV applications Align with DoD memo requirements and offer advanced key management functions, enhancing flexibility for organizations through support of larger RSA keys (RSA-3072 and RSA-4096), as well as Ed25519 and X25519 key types. Migration to Yubico’s own cryptographic library Yubico has developed a library in-house that performs the underlying cryptographic operations (decryption, signing, etc.) for RSA and ECC. Capabilities in the new 5.7 YubiKeys also align with recent U.S. Government memo requirements on adopting phishing-resistant MFA and offer advanced key management functions. Compliance with upcoming NIST requirements and corporate mandates is also supported by enforcing the blocking of simple patterns and common PINs at the hardware level. Aligned with the 5.7 firmware release, significant updates within Yubico Authenticator 7 launched in support of managing these new features. This new version enables use of the new public key algorithms for PIV, bringing more advanced management options and streamlines the interface for a better user experience when handling many credentials. Additionally, it adds localization with official support for French and Japanese, with additional community-provided translations. The app is now available for all major desktop platforms, as well as for Android. Enhanced features for iOS will be coming in the next version of the iOS application. It's the perfect companion to the new YubiKey 5.7, with its expanded credential storage. The Yubico Authenticator delivers strong security by enabling users to store credentials on a YubiKey instead of a mobile phone, thereby significantly removing risks posed by remote attackers targeting software-based authenticator apps. By incorporating hardware-backed strong two-factor authentication in the YubiKey, credentials stays safe and the bar for security is raised while delivering the convenience of an authenticator app. お知らせ • Oct 11
Yubico AB, Annual General Meeting, May 14, 2024 Yubico AB, Annual General Meeting, May 14, 2024.