YubiKey 5C NFC FIPS (Firmware 5.4)

The YubiKey 5 FIPS Series (USB-C + NFC) is a government-certified, hardware-based authentication device engineered to deliver strong, compliant, and phishing-resistant security for high-assurance environments.

Each key is FIPS 140-2 validated (Overall Level 2, Physical Security Level 3) and meets Authenticator Assurance Level 3 (AAL3) under NIST SP800-63B, ensuring it complies with strict federal and regulatory standards.

This edition of the YubiKey combines multi-protocol support including FIDO2, U2F, PIV, OATH, OTP, and OpenPGP, to protect accounts across cloud, hybrid, and on-premises systems. Designed for government, finance, and enterprise environments, it eliminates account takeovers and simplifies compliance-driven authentication.

Firmware note: This product ships with firmware 5.4.3 (FIPS 140-2 validated). FIPS 140-2 devices with active certificates remain compliant. The next-generation key with firmware 5.7 and FIPS 140-3 validation (NIST CMVP Certificate #5291) is now available - view the YubiKey 5C NFC FIPS (Firmware 5.7).

Note: The YubiKey for Windows Hello app is not compatible with the FIPS series.

FIPS 140-2 Validated Security: Certified at Overall Level 2 / Physical Level 3, meeting US government-grade standards

Phishing and Account Takeover Defence: Hardware-based cryptography stops remote credential theft

Multi-Protocol Compatibility: Works with FIDO2, U2F, PIV, OTP, OATH (HOTP/TOTP), and OpenPGP for flexibility across platforms

Passwordless Authentication: Enables FIDO2/WebAuthn login for modern, phishing-resistant authentication

Fast, Reliable Access: Authenticates 4× faster than OTP or SMS codes with no batteries or network required

Enterprise Integration: Supports Microsoft Entra ID, Google Cloud, Okta, Ping Identity, AWS IAM, and Cisco Duo

Operational Efficiency: Reduces password-reset helpdesk tickets by up to 92% (Google’s YubiKey rollout study)

Rugged Design: IP68 rated, crush resistant, waterproof, and built to last for years of enterprise use

Trusted Globally: Adopted by top tech firms, banks, and government agencies worldwide

Model: YubiKey 5C NFC FIPS (USB-C, NFC-enabled)

Firmware: 5.4.3

Certifications: FIPS 140-2 (Level 2, Physical Level 3) | FIDO2 | U2F | AAL3 (NIST SP800-63B)

Authentication Methods: Strong Two-Factor | Multi-Factor | Passwordless

Protocols: FIDO2/WebAuthn | U2F | PIV (Smart Card) | Yubico OTP | OATH (HOTP/TOTP) | OpenPGP | Static Password

Cryptography: RSA 2048 | ECC p256 | ECC p384

Connectivity: USB-C | NFC

Durability: IP68 rated | Crush Resistant | No Batteries | No Moving Parts

Device Type: FIDO HID Device | CCID Smart Card | HID Keyboard

UPC/GTIN: 5060408464236

Made in: USA and Sweden (EU)

The YubiKey 5C NFC FIPS integrates seamlessly with identity and access management platforms supporting FIDO2, U2F, and PIV, including:

• Microsoft Entra ID, Active Directory, Google Cloud Identity, AWS IAM
• Okta, Ping Identity, Cisco Duo, Salesforce
• 1Password, Keeper, Bitwarden, LastPass Premium
• Google Workspace, Dropbox, Microsoft 365, and other cloud-based services

The YubiKey 5 FIPS Series delivers compliance-grade authentication for organisations operating in regulated industries, offering unmatched security, interoperability, and long-term reliability for enterprise and government use.