Yubikey 5 Nano
: Resources & Documentation
The Yubikey 5 Nano
The YubiKey 5 Nano offers the power and multi-protocol versatility of the YubiKey 5 series in a microscopic form factor. Specifically designed to fit almost entirely into a USB-A port, it remains permanently connected to your laptop or workstation without getting in the way when you’re on the go. It’s the solution of choice for users who require maximum protection against phishing without having to handle or carry an external key on a daily basis.
Technical Specifications for the Yubikey 5 Nano
Interfaces & Connectivity
The YubiKey 5 Nano uses a native USB-A interface (USB 2.0-compatible). All of the built-in security features and cryptographic protocols are accessible through this single interface.
OTP (One-Time Password) Module
The OTP applet includes two programmable, independent slots. Each slot can be configured independently to store and generate one of the following types of identifiers:
Yubico OTP
HMAC-SHA1 Challenge-Response
Static Password
OATH-HOTP (Counter-based)
OATH Module (Application-Based Two-Factor Authentication)
The YubiKey 5 Nano can store up to 32 OATH credentials (supporting both time-based OATH-TOTP and counter-based OATH-HOTP protocols). These codes are accessed and managed through the official Yubico Authenticator app.
OpenPGP Module
This submodule implements the OpenPGP specifications for smart cards and integrates natively with GnuPG for encryption, digital signing, and SSH key authentication.
Protocol Updates: Version 2.0 of the OpenPGP specifications is enabled by default. Starting with firmware version 5.2.3 (and later), the key implements version 3.4 of these specifications.
Software requirement: To use key sizes greater than 2048 bits, you must have GnuPG version 2.0 (or later) installed on your system.
Supported basic algorithms: RSA 1024, RSA 2048, RSA 3072, RSA 4096.
Additional Algorithms (Firmware 5.2.3 and later):
Elliptic curves: secp256r1, secp256k1, secp384r1, secp521r1
Brainpool: brainpoolP256r1, brainpoolP384r1, brainpoolP512r1
Edwards/Montgomery: curve25519, x25519 (decryption only), ed25519 (signature and authentication only)
Physical specifications
Form factor: “Nano” format (ultra-compact, designed to remain permanently plugged into the USB-A port without protruding).
Connector: USB-A.
Dimensions: 12 mm x 13 mm x 3.1 mm.
Weight: 1 g.
Environmental resistance: Hermetically sealed design, fully waterproof, and highly resistant to mechanical shocks. Operates without a battery or any moving parts.
Safe operating temperature ranges:
Operating temperature range: 0 °C to 40 °C
Storage temperature range: -20 °C to 85 °C
FIDO2 / WebAuthn Protocol
Supports secure single-factor, multi-factor (2FA), or completelypasswordless authentication.
Storage capacity: This module can store up to 100 resident keys (Passkeys / discoverable identifiers).
Enhanced security: Your login credentials are protected locally by a PIN that you set yourself.
Authentication mechanism: Once the key is unlocked with your PIN, simply touching its flush-mounted touch sensor confirms your physical presence and logs you in instantly, without having to enter a username or password. The FIDO2 app is certified by the FIDO Alliance.
FIDO U2F Protocol
The U2F (Universal 2nd Factor) app is certified by the FIDO Alliance. It allows users to generate and store an unlimited number of credentials to serve as a second factor of authentication (2FA) that is impervious to remote attacks.
PIV Module (Smart Card)
This module provides a smart card interface that complies with PIV (Personal Identity Verification) standards. In the Microsoft Windows environment, device integration is optimized through the use of the official YubiKey Smart Card minidriver.
Default values and secrets:
PIN:
123456PUK code:
12345678Management Key:
010203040506070801020304050607080102030405060708
Supported algorithms: RSA 1024, RSA 2048, ECC P256, ECC P384.
Slot Architecture and Mapping:
Slot 9a: AuthenticationSlot 9b: Management KeySlot 9c: Digital SignatureSlot 9d: Key ManagementSlot 9e: Card AuthenticationSlot f9: CertificateSlots 82-95: Retired Key Management
Documents related to the Yubikey 5 Nano
Video(s) related to the Yubikey 5 Nano
How to - Yubikey and Google (English)
Introduction - Yubikey and Facebook (English)
Introduction - Yubikey and DropBox (English)
Introduction - Yubikey and Windows Hello (English)
Introduction - Yubikey and MacOs (English)
Introduction - Yubikey and Tweeter (English)
Introduction - Yubikey and GitHub (English)
