Quick Answer
For most people, the YubiKey 5 NFC (~$52) is the best hardware security key — it supports every major 2FA protocol (FIDO2, WebAuthn, TOTP, Smart Card) and connects via both USB-A and NFC tap. If your device has USB-C ports, get the YubiKey 5C NFC (~$57). On a tight budget, the Security Key NFC (~$28) covers FIDO2 for Google, Microsoft, and GitHub. Always buy two — one to use, one as a backup.
ℹ️ Affiliate disclosure: links are Amazon affiliate links. Commission earned at no extra cost to you.
⭐ Quick Picks
- Best overall: YubiKey 5 NFC (USB-A) — ~$52
- Best for USB-C devices: YubiKey 5C NFC — ~$57
- Best budget: Security Key NFC (USB-A) — ~$28
- Best budget USB-C: Security Key C NFC (USB-C) — ~$30
- Best bundle (backup key included): YubiKey 5C NFC + Nano 5C Bundle — ~$100
Full YubiKey Model Comparison
| Model | Connector | FIDO2 | TOTP/HOTP | Smart Card (PIV) | OpenPGP | Price |
|---|---|---|---|---|---|---|
| YubiKey 5 NFC | USB-A + NFC | ✔ | ✔ | ✔ | ✔ | ~$52 Best Pick |
| YubiKey 5C NFC | USB-C + NFC | ✔ | ✔ | ✔ | ✔ | ~$57 |
| YubiKey 5C | USB-C only | ✔ | ✔ | ✔ | ✔ | ~$52 |
| Security Key NFC | USB-A + NFC | ✔ | — | — | — | ~$28 |
| Security Key C NFC | USB-C + NFC | ✔ | — | — | — | ~$30 |
| 5C NFC + Nano Bundle | USB-C + NFC (×2) | ✔ | ✔ | ✔ | ✔ | ~$100 |
Which YubiKey Is Right for You?
Choose the YubiKey 5 NFC if...
- You want one key that does everything — consumer accounts, corporate SSO, SSH, and code signing
- Your computer has a USB-A port (most Windows desktops and older laptops)
- You want TOTP support (so you can replace Google Authenticator)
Choose the YubiKey 5C NFC if...
- You have a modern laptop, MacBook, or Android phone with USB-C
- You want the same full feature set as the 5 NFC but with a USB-C connector
Choose the Security Key NFC if...
- You only need FIDO2/WebAuthn for Google, Microsoft, GitHub, or Facebook
- You're on a budget and don't need TOTP or Smart Card features
- This is your first hardware key and you want to try before investing more
What Accounts Work with a YubiKey?
The YubiKey 5 series works with any service that supports FIDO2/WebAuthn, TOTP, or Smart Card authentication. Major platforms include:
- Google Account (Gmail, Drive, YouTube, Workspace)
- Microsoft Account (Outlook, Teams, Azure AD, Windows Hello)
- Apple ID (iOS 16.3+ and macOS Ventura+)
- GitHub, GitLab, Bitbucket
- Facebook, Instagram, Twitter/X
- Dropbox, 1Password, Bitwarden
- AWS, Azure, GCP (enterprise use)
Check the full list at yubico.com/works-with-yubikey.
💡 Always register two keys: If you lose your only security key, you could be locked out of your accounts. Buy two — register both on every important account — and store one as a backup.
Frequently Asked Questions
Which YubiKey should I buy?
For most people, the YubiKey 5 NFC (USB-A, ~$52) is the best choice. If your devices have USB-C, get the 5C NFC. On a budget, the Security Key NFC ($28) covers FIDO2 for Google, Microsoft, and GitHub.
Does YubiKey work with Google, Microsoft, and Apple?
Yes. The YubiKey 5 series works with all three. Apple ID support requires iOS 16.3+ or macOS Ventura+.
What happens if I lose my YubiKey?
Register two keys on every important account — primary and backup. If both are lost, use your account's recovery codes (save these when setting up 2FA). Yubico recommends buying two keys from the start.
What is the difference between YubiKey 5 and Security Key NFC?
The YubiKey 5 supports FIDO2, WebAuthn, TOTP/HOTP, OpenPGP, and PIV Smart Card. The Security Key NFC supports FIDO2 and WebAuthn only — sufficient for most consumer use cases, at a lower price.