YubiKey Bio Series supports fingerprint recognition for passwordless and second factor logins

Yubico launched YubiKey Bio Series, the first YubiKey series that supports fingerprint recognition for secure passwordless and second factor logins. Built for biometric authentication on desktops, the YubiKey Bio Series supports modern FIDO2/WebAuthn and U2F protocols, in both USB-A and USB-C form factors.

The YubiKey Bio is available for purchase at a retail price of $80 for the USB-A form-factor and $85 for the USB-C form-factor. Premium tier YubiEnterprise Subscription customers can also experience YubiKey to YubiKey Bio upgrades.

In keeping with Yubico’s innovation and design philosophy, the YubiKey Bio does not require any batteries, drivers, or associated software. The new security keys integrate with the native biometric enrollment and management features supported in the latest platforms and operating systems. Once a YubiKey Bio is set up, users will experience secure second factor and passwordless logins for desktop-based FIDO-supported services and applications.

The YubiKey Bio Series reimagines biometric authentication on a security key. Its three chip architecture allows the biometric fingerprint material to be stored in a separate secure element which delivers enhanced protection from physical attacks. The YubiKey Bio acts as a single, trusted hardware-backed root of trust which allows the user to authenticate with the same key across multiple desktop devices, operating systems, and applications.

“With the launch of the YubiKey Bio Series, we are proud to raise the standard for biometric security keys, enabling simple and strong passwordless authentication for our enterprise customers and everyday YubiKey users,” said Stina Ehrensvärd, CEO and co-founder, Yubico.

The YubiKey Bio enables biometric login on desktop with all applications and services that support FIDO protocols and works out-of-the-box with Citrix Workspace, Duo, GitHub, IBM Security Verify, Microsoft Azure Active Directory and Microsoft 365, Okta and Ping Identity. With the growing adoption of modern authentication, Yubico continues to work closely with its partner ecosystem to encourage support of biometric authentication as detailed in the WebAuthn and FIDO2 specs.

Key capabilities of the YubiKey Bio Series include:

• Meets the most stringent hardware security key requirements with fingerprint templates stored in a separate secure element on the YubiKey Bio.
• Supports FIDO2/WebAuthn and FIDO U2F, based on the Yubico invention of enabling one single authenticator to work across any number of applications, with highest level of security, and without sharing any information between services.
• Works across desktop platforms supporting WebAuthn such as Windows, macOS, Chrome OS, and Linux and across browsers such as Edge and Chrome as well as other Chromium based browsers.
• Available as both USB-A and USB-C in Yubico’s hallmark, slim and durable keychain design.
• Offers portability which allows users to switch devices, log into shared workstations, and also support mobile-restricted environments.
• Allows for use of security key PIN for scenarios where biometrics cannot be used.
• Supported by Yubico Authenticator for Desktop app on Windows, macOS and Linux to enroll new fingerprints, add or delete fingerprints when native platform and browser capabilities are limited.

For customers that are looking for more form factors, protocols, and NFC support, they may benefit from a YubiKey 5 Series instead of the YubiKey Bio.

“Authenticating with the combined solution of the Duo platform and the YubiKey has always been remarkably easy and fast. Biometrics play an important role in any company’s strategy to go passwordless, and we’ve tested the YubiKey Bio extensively with Duo’s upcoming solution, with great results. We’re excited to provide customers a simpler, faster and more convenient way to protect against phishing and other access threats,” said Chris Demundo, Senior Product Manager, Authentication, at Duo Security.

“Our primary research indicates that reductions in end user access friction result in dramatic increases in security effectiveness. The YubiKey Bio achieves both goals simultaneously to help organizations achieve a Zero Trust posture while enhancing the user experience,” said Steve Brasen, Research Director, Enterprise Management Associates.

“Continuing on their remarkable path to protect digital identities and customer demand for multi-factor authentication as part of a zero trust model, Yubico’s newest tamper-resistant hardware YubiKey Bio—for biometric authentication and verification, has arrived—just-in-time,” said Carla Roncato, Senior Analyst, Enterprise Strategy Group.