Yubico YubiKey (WebAuthn / FIDO2) Integration

YubiKey is a hardware authentication device by Yubico that provides strong, phishing-resistant multi-factor authentication using WebAuthn and FIDO2 protocols

Read docs Visit GitHub

Yubico YubiKey (WebAuthn / FIDO2)

Benefits with Ory + Yubico YubiKey (WebAuthn / FIDO2) Integration

Combining Yubikey with Ory provides the highest level of phishing-resistant, hardware-based multi-factor authentication. While Ory manages the secure WebAuthn/FIDO2 protocols and session lifecycle, Yubikey delivers a physical token that guarantees user presence and prevents credential theft. This powerful integration allows you to secure highly sensitive accounts, meet strict enterprise security requirements, and provide a frictionless, tap-to-authenticate experience that is vastly superior to traditional passwords or SMS OTPs

Use Cases

— 02 use cases

CIAM

Overcomes the challenge of consumer credential theft by providing phishing-resistant, hardware-based multi-factor authentication using WebAuthn/FIDO2 protocols.

Explore CIAM

B2B IAM

Enhances enterprise security by securing highly sensitive B2B accounts with a frictionless, tap-to-authenticate experience that guarantees user presence

Explore B2B IAM

Core Functionality

— 05 capabilities

High-Assurance Authentication
Enforces robust, phishing-resistant hardware token verification for maximum security.
Standardized Integration
Connects seamlessly via standard WebAuthn protocols without requiring custom code.
Flexible Credential Support
Accommodates diverse authenticators, from physical keys to built-in device biometrics.
Regulatory Compliance
Satisfies stringent requirements for AAL2 (NIST 800-63) when paired with a primary factor.
Immutable Configuration
Ensures robust security by strictly binding credentials to specific, unchangeable relying party IDs

Frequently Asked Questions

How does the YubiKey (WebAuthn / FIDO2) hardware MFA integration with Ory work?

It leverages WebAuthn and FIDO2 protocols to provide phishing-resistant, physical token-based authentication.

Is the YubiKey (WebAuthn / FIDO2) integration with Ory more secure than SMS OTPs?

Yes, hardware tokens guarantee user presence and protect against credential theft and man-in-the-middle attacks.

Does Ory natively support the YubiKey (WebAuthn / FIDO2) integration?

Yes, Ory provides native support for WebAuthn, making it easy to integrate hardware security keys

Yubico YubiKey (WebAuthn / FIDO2) Integration

Benefits with Ory + Yubico YubiKey (WebAuthn / FIDO2) Integration

CIAM

B2B IAM

High-Assurance Authentication

Standardized Integration

Flexible Credential Support

Regulatory Compliance

Immutable Configuration

Frequently Asked Questions