A FIDO2 YubiKey with a biometric sensor is a cause for celebration. Yubico carefully considered customer needs in designing the biometric key to make it secure and simple enough for anyone to use. The user verification requirement asks for proof that the user logging in is the same user as the one who set the PIN, enrolled fingerprints, and registered the key with the app or service (Relying Party, or RP).

“More and more of our customers prefer biometric methods, because they provide strong security protection and are easier and faster to sign in than a password. The YubiKey Bio implements always-on user verification, or alwaysUV. Partner director of product management in Microsoft's identity and network access division Sue Bohn praised Yubico's latest security key in a press release (opens in new tab), saying: It acts as a single, trusted hardware-backed root of trust which users can leverage to authenticate with the same key across multiple desktop devices, operating systems and applications. The YubiKey Bio Series also features a three chip architecture which allows biometric fingerprint data to be stored in a separate secure element that delivers enhanced protection from physical attacks. Out of the box, the device works with Citrix Workspace, Duo, GitHub, IBM Security Verify, Microsoft Azure Active Directory, Microsoft 365 (opens in new tab), Okta and Ping Identity. As a result, once a YubiKey Bio is set up, users will be able to use it for secure second factor authentication and passwordless logins for desktop-based FIDO-supported services and applications.

Yubikey bio