Yubikey 5 NFC
: Resources & Documentation
The Yubikey 5 NFC
The YubiKey 5 NFC is the leading hardware authentication solution for securing your digital access. Designed for ultimate versatility, it combines a USB-A connection with a contactless NFC interface (external link). This multi-protocol device eliminates the risk of phishing attacks by simultaneously protecting your personal accounts (email, social media) and your business infrastructure (cloud environments, servers, VPN access).
Technical Specifications for the Yubikey 5 NFC
Interfaces & Connectivity:
The YubiKey 5 NFC uses a USB-A interface (USB 2.0-compatible) as well as an NFC (Near Field Communication) interface for contactless use on mobile devices. All of the built-in applications are available through both of these communication channels.
OTP (One-Time Password) Module
The OTP applet contains two independent programmable slots. Each slot can be configured to store and generate one of the following types of identifiers:
Yubico OTP
HMAC-SHA1 Challenge-Response
Static Password
OATH-HOTP (Counter-based)
OATH Module (Application-Based Two-Factor Authentication)
The YubiKey 5 NFC can store up to 32 OATH credentials (supporting both time-based OATH-TOTP and counter-based OATH-HOTP protocols). This module is accessed through the dedicated Yubico Authenticator app.
OpenPGP Module
This submodule implements the OpenPGP specifications for smart cards and integrates natively with GnuPG for your encryption, signing, and SSH key operations.
Protocol Updates: Version 2.0 of the OpenPGP specifications is enabled by default. Starting with firmware version 5.2.3 (and later), the key implements version 3.4 of these specifications.
Software requirement: To use key sizes greater than 2048 bits, you must have GnuPG version 2.0 (or later) installed on your system.
Supported basic algorithms: RSA 1024, RSA 2048, RSA 3072, RSA 4096.
Additional Algorithms (Firmware 5.2.3 and later):
Elliptic curves: secp256r1, secp256k1, secp384r1, secp521r1
Brainpool: brainpoolP256r1, brainpoolP384r1, brainpoolP512r1
Edwards/Montgomery: curve25519, x25519 (decryption only), ed25519 (signature and authentication only)
Physical specifications
Form factor: Standard “Ticket” format flash drive, ultra-rugged.
Connector: USB-A.
Dimensions: 18 mm x 45 mm x 3.3 mm.
Weight: 3 g.
Durability: Waterproof and crush-resistant design (sealed thermoplastic shell, no battery or moving parts).
Safe operating temperature ranges:
Operating temperature range: 0 °C to 40 °C
Storage temperature range: -20 °C to 85 °C
FIDO2 / WebAuthn Protocol
Supports secure single-factor, multi-factor (2FA), or completelypasswordless authentication.
Storage capacity: This module can store up to 100 resident keys (Passkeys / discoverable identifiers).
Enhanced security: These credentials are protected locally by a PIN that you set yourself.
Authentication mechanism: Once the key is unlocked with your PIN, simply touching its touch sensor confirms your identity and logs you in instantly, without having to enter a username or password. The FIDO2 app is certified by the FIDO Alliance.
FIDO U2F Protocol
The U2F (Universal 2nd Factor) app is certified by the FIDO Alliance. It allows you to generate and store an unlimited number of credentials to secure your logins as a second factor (2FA).
PIV Module (Smart Card)
This module provides a smart card interface that complies with PIV standards. In the Microsoft Windows environment, device integration is optimized through the use of the official YubiKey Smart Card minidriver.
Default values and secrets:
PIN:
123456PUK code:
12345678Management Key:
010203040506070801020304050607080102030405060708
Supported algorithms: RSA 1024, RSA 2048, ECC P256, ECC P384.
Slot Architecture:
Slot 9a: AuthenticationSlot 9b: Management KeySlot 9c: Digital SignatureSlot 9d: Key ManagementSlot 9e: Card AuthenticationSlot f9: CertificateSlots 82-95: Retired Key Management
Documents related to the Yubikey 5 NFC
Video(s) related to the Yubikey 5 NFC
How to - Yubikey and Google (English)
Introduction - Yubikey and Facebook (English)
Introduction - Yubikey and DropBox (English)
Introduction - Yubikey and Windows Hello (English)
Introduction - Yubikey and MacOs (English)
Introduction - Yubikey and Tweeter (English)
Introduction - Yubikey and GitHub (English)
