It seems to only work if you have the Yubikey 5Ci with Lightning and USB-C connectors. HOWEVER, the Yubikey 5 NFC does not work as expected with this app on iOS: all it does is again pop up the alert to open Safari with a verification URL. Using Yubico Authenticator moves the cryptographic secret to the physical key. The vulnerability of all the usual phone-based OTP apps (besides the possibly weaker crypto parameters used) is that the cryptographic secrets are stored on the phone, and may be compromised by malware. The difference is that you need to tap the Yubikey to the phone (or plug it in to USB if you're using it on a computer) to generate the numeric second factor to be typed in. It takes the place of Google Authenticator (and the usual mobile time-based OTP apps). This app is available on iOS, Android, macOS, Windows, and Linux.

It just pops up the 'Open NFC link in Safari' alert. When trying to sign in using the Chrome browser in iOS, tapping the Yubikey to the phone does not work as a second factor. I set up all my Google accounts to use the Yubikey, and also Facebook and Github. If you hold the Yubikey up to the back of the phone (near the top, next to the camera lens cluster), it will pop up an alert that asks if you want to open a web page in Safari for verification. I have an iPhone 11 Pro running iOS 13.3 Beta. I just bought a pair of Yubikey 5 NFC security keys, as a more convenient alternative to phone apps like FreeOTP, Authy, Duo Mobile, or Google Authenticator to generate a numeric one-type second factor for logins.ĭespite the description, the Yubikey 5 NFC does not work well with iOS. PROTIP: Set up BOTH your primary key and a backup at the same time, especially for accounts where the physical key is required and is the only U2F accepted. If you're thinking of getting one to NFC tap the key to your phone when prompted for a security key as a second factor, this does NOT work. TL DR Works in principle on iOS, but does not work in practice.

Yubikey 5c nfc iphone