Passwords have been with us for decades – and at the same time, they are one of the biggest weaknesses in IT security. Weak passwords, phishing, password reuse, or stolen credentials continue to be among the most common causes of successful cyberattacks.
With Passkeys, a modern alternative is now available. More and more platforms such as Microsoft 365, Google Workspace, Apple, Amazon, and GitHub support passwordless login. In combination with a YubiKey, companies gain particularly secure and convenient authentication.
What are Passkeys?
A passkey replaces the classic password with a cryptographic key pair. The private key never leaves the user's security device or computer.
During login, it is only verified whether the user possesses the corresponding private key. A password does not need to be entered or stored.
Why are Passkeys more secure?
- No password can be stolen.
- Phishing websites do not receive credentials.
- No password reuse.
- No resetting of forgotten passwords.
- Significantly lower risk of successful account takeovers.
What role does a YubiKey play?
A YubiKey securely stores the private key in certified hardware. This prevents the key from being exported or copied.
Even if a laptop is compromised, the private key remains protected. Login is simply done by inserting or tapping the YubiKey via NFC and a quick confirmation.
Benefits for Businesses
- Protection against phishing attacks
- Reduced helpdesk effort due to eliminated password resets
- Faster employee login
- Support for modern Zero Trust strategies
- Stronger security for Microsoft 365, Google Workspace, VPN, and cloud services
- Support for security requirements related to NIS2, ISO 27001, and DORA
Where can Passkeys already be used?
The number of supported services is continuously growing. Among others, passkeys and FIDO2 security keys can already be used in many well-known applications:
- Microsoft 365 / Microsoft Entra ID
- Google Workspace
- Apple ID
- GitHub
- Dropbox
- Adobe
- Amazon
- PayPal
- Numerous enterprise applications with FIDO2 support
Which YubiKeys are suitable for Passkeys?
For professional use, the following models are particularly recommended:
Which model is right depends on the devices used and the desired additional features. The YubiKey 5 Series supports FIDO2 and passkeys, as well as other features like Smartcard/PIV, OpenPGP, and OTP. The Security Key Series is particularly interesting when the focus is on FIDO2, U2F, and passwordless login.
YubiKey 5 Series or Security Key Series?
For many companies, the YubiKey 5 Series is the most flexible choice, as it supports multiple authentication methods and is also suitable for more complex IT environments.
The Security Key Series is a good choice if the primary goal is to secure FIDO2, passkeys, and modern web logins.
Practical Example: Passwordless Login in the Company
A typical deployment looks like this: Employees each receive at least two YubiKeys – a main key for daily use and a backup key, which is kept securely. The YubiKeys are then registered in central identity services such as Microsoft Entra ID or Google Workspace.
During login, the user no longer has to enter a password. Instead, they confirm the login with their YubiKey. This significantly reduces the risk of phishing and stolen passwords.
Important: Always Plan for a Backup YubiKey
For businesses and private users, it is always recommended to use at least two security keys. If a YubiKey is lost or damaged, access remains possible via the backup key.
The combination of a YubiKey 5C NFC for modern laptops and smartphones and a second YubiKey 5 NFC as a reserve is particularly popular.
Conclusion
Passkeys are far more than a new login standard – they mark the beginning of a passwordless future. Companies benefit from higher security, less administrative effort, and a significantly better user experience.
In conjunction with a YubiKey, login can be raised to a new level of security while sustainably improving protection against phishing.
Our Tip: If you want to introduce passkeys in your company, start with the appropriate YubiKey 5 Series or the Security Key Series.
