MFA: YubiKey Facts & Purchasing Guide

Warning:  Microsoft may require a PIN when using some models of YubiKey for M365 MFA.  The YubiKey PIN is maintained through a desktop app provided by the YubiKey manufacturer called "YubiKey Manager".  Remember your YubiKey PIN or it will not work for M365 MFA.  

If you lose or forget your YubiKey PIN, you will have to work with the YubiKey "YubiKey Manager" application to reset your PIN, or work with the YubiKey manufacturer directly - OIT has no access to assist with lost YubiKey PINs.  This is why OIT STRONGLY recommends you have a secondary method set up for MFA.  See Managing Account Verification Methods for instructions.

Product Quick Facts

YubiKeys are small USB devices that are inserted into a desktop or laptop computer USB port / Lighting connector

Pressing the top or side button on the YubiKey generates and automatically enters a passcode on MFA prompts

YubiKey 5 series meet Microsoft’s Modern Authentication hardware requirements

YubiKey 5 Series (non-FIPS)

NOT for use with FIPS systems such as Federal Grants

Recommended for all other non-FIPS systems

Available in several form factors including USB-A, USB-C, NFC, and Lightning 

Recommended connector types are:

  • YubiKey 5C NFC (USB-C)
  • YubiKey 5Ci (USB-C & Lightning)

Available from Yubico directly, or through popular online vendors such as Amazon or Best Buy.  OIT does not provide YubiKeys for students, faculty or staff.

 

5C NFC hardware token

YubiKey 5C NFC (non-FIPS)

GTIN: 5060408462331

Yubico Product URL : https://www.yubico.com/product/yubikey-5c-nfc/ 
 

YubiKey 5Ci hardware token image

YubiKey 5Ci (non-FIPS)

GTIN: 5060408461969

Yubico Product URL : https://www.yubico.com/product/yubikey-5ci/