Security keys are small hardware authenticators that confirm your identity when you sign in to online accounts, work systems or a password manager. Most plug into a USB port, and some also work by tapping against a phone via NFC. They suit anyone who wants stronger protection than an SMS code, from home users to IT teams. Our range comes from Yubico and Swissbit.
How to choose a security key
Supported standards. FIDO2 (WebAuthn) and U2F cover sign-ins with many well-known services, including Google and Microsoft accounts. Some keys also offer one-time passwords, smart card (PIV) functions and OpenPGP, which matter for company logins, SSH and email encryption. Check which standards your accounts accept before you buy.
Connector and NFC. USB-C suits newer laptops and phones, while USB-A suits older computers and desktops. A key with NFC works with a phone or tablet without a cable. If you use both a computer and a phone, choose a model that covers both.
Number of keys. Buy two. Register both with your important accounts and store the spare somewhere safe, away from the main key, because losing your only key can lock you out.
Features for your use. A basic FIDO2 key is enough for personal email, social media and any other account that supports FIDO2. Businesses and administrators often need multi-protocol keys with smart card support. Some models add a fingerprint reader that replaces the PIN.
Security key brands in our range
- Yubico: the Swedish-American company behind the YubiKey family and one of the developers, together with Google, of the FIDO U2F standard. Most of the keys in our range are from Yubico.
- Swissbit: a Swiss manufacturer known for industrial memory and secure storage, which also makes FIDO2 security keys.
Frequently asked questions about security keys
What is a security key and how does it work?
A security key is a physical device that you use to confirm a sign-in to an account. After entering your password, you plug the key into a USB port, or hold it against your phone, and touch its sensor. The key checks the website address, so a fake site cannot trick it.
Is a security key safer than an SMS code or an authenticator app?
Yes, as a rule, because it resists phishing pages. An SMS code can be intercepted or talked out of you, and an app code can be typed into a fake page. A security key only works on the genuine website.
What should I do if I lose my security key?
Sign in with your spare key or recovery codes, then remove the lost key in the account settings. This is why it is worth owning two keys and saving your recovery codes. Without them, recovering some accounts can be difficult.
Will a security key work with my phone?
Yes, if the key has NFC or a connector that fits your phone, such as USB-C. Many modern phones support NFC keys, but check that the app or service you are signing in to supports them too.
