Skip to content
sudopicks
esc

Yubico YubiKey 5C NFC

~£60typical UK price when we researched it
Check price at Amazon UK (opens in a new tab, affiliate link)

Affiliate link. As an Amazon Associate I earn from qualifying purchases. Details

Yubico YubiKey 5C NFC review

Researched, not hands-on tested.How we review ›

by SudoPicks Research · editor Paul HR · published 24 Oct 2026 · updated 24 Oct 2026

Yubico YubiKey 5C NFC
8.1out of 10verdict: buy

The YubiKey 5C NFC is for people who want one key that covers FIDO2 passkeys, smart card, OpenPGP and OTP. It suits anyone who moves between USB-C laptops and NFC phones.

1st of 5 security keys we've reviewed
#1 in security keys (2026)~£60typical UK price when we researched itCheck price at Amazon UK (opens in a new tab, affiliate link)

Affiliate link. As an Amazon Associate I earn from qualifying purchases. Details

Get a price-drop alert

Leave the price blank to hear about new 90-day lows. One email at most each week.

New to security keys? What they are and what to look for

A security key is a small USB or NFC device you use to sign in to accounts. Even if someone steals your password, they can't get in without the key in your hand.

Do you need a security key? One of the strongest protections for your email, bank and work accounts. Recommended for anyone, and especially for people at higher risk of being targeted.

What to look for

  • Buy two, so you have a backup if one is lost
  • USB-C and NFC work with modern laptops and phones
  • FIDO2 and passkey support

Unsure about a word? Jargon explained

How the 8.1 adds up

Our security keys rubric
  • 10Protocols30% of score
  • 8Connectivity20% of score
  • 8Passkey storage15% of score
  • 6Security certification and firmware20% of score
  • 7Durability and value15% of score

Against the 5 security keys we've reviewed

bar = the range of all 5 · dot = this one · better →

  • Overall score 8.1/101st of 5
  • Price £605th cheapest
  • Value for money Poorer value than most4th best of 5

Support and features

Software updatesNo end-of-support date announced in the sources read.
  • NFC
  • USB-C
  • OpenPGP / PIV

Security and compatibility

Latest firmware or softwareApril 2025no update for over a year source
Known security issues
  • YSA-2025-02 (CVE-2025-29991) (2025): An attacker could exploit a low-severity flaw in the FIDO PIN/UV Auth Protocol Two implementation, affecting versions 5.4.1 through 5.7.3. fixed
  • YSA-2024-02 (CVE-2024-35311) (2024): An attacker could enumerate relying parties without a PIN prompt, a low-severity privacy issue rated CVSS 3.3. fixed
  • YSA-2020-04 (2020): Per a Vulners listing, the OTP application lets a user set optional access codes on OTP slots, and the access code is not checked when updating NFC components, rated CVSS 8.8.
Update recordYubico released firmware 5.7.4 on April 1, 2025, and fixed the listed advisories in firmware updates, though the fix status for YSA-2020-04 was not confirmed and firmware cannot be upgraded in the field.
LinuxNot confirmed. No kernel-driver information was found; the key works through standard HID and udev rules, but mainline kernel inclusion was not verified.

Pros and cons

+ pros

  • Wide protocol list including PIV, OpenPGP and OTP
  • USB-C and NFC on a single key
  • IP68 rating with no batteries or moving parts

− cons

  • Standard model is not FIPS-certified
  • USB-C 2.0 only, no USB-A

Price history

Price history appears here once we have tracked this product for a few days.

The full review

Where it fits

The YubiKey 5C NFC is Yubico's USB-C and NFC key. It supports PIV, OpenPGP and OTP in addition to FIDO2/WebAuthn, so one key carries several authentication methods. The sections below cover what the published specs say about each area and where the limits are.

Protocols10/10

This is the main strength. Yubico lists FIDO2 at Level 2, CTAP 2.1, FIDO U2F, smart card (PIV), OpenPGP, OATH-HOTP, OATH-TOTP, Yubico OTP, challenge-response and static password. Passkeys, PIV, OpenPGP and OTP all sit on the same key, so you do not need a separate device for each protocol.

The limit that matters is on discoverable ones, covered below.

Connectivity8/10

The key has a USB-C 2.0 connector and NFC (ISO 14443-3 Type A). Yubico's product page and technical manual both list the two together. That suits modern laptops and phones that tap or plug in. The manufacturer states there is no USB-A connector. If you have machines with only USB-A ports, this key does not plug into them directly.

Power consumption is listed by the manufacturer as under 150 mW.

Passkey storage8/10

The number of discoverable FIDO2 credentials depends on firmware. Firmware 5.7 and later holds 100. Firmware 5.0 to 5.6 holds 25. The current listed firmware is 5.8, which falls in the 100 range.

With 100 slots, the key suits someone who keeps passkeys for many accounts on it. With 25, you would need to be more selective about which accounts get a resident passkey.

Certification and firmware6/10

The key carries FIDO2 L2. Yubico's listing says AAL3 is a yes if the environment doesn't require FIPS. NIST validation is listed as not applicable for this model.

The standard 5C NFC is not FIPS-certified. Yubico sells a separate FIPS 5C NFC variant that runs firmware 5.7.4 and is certified to FIPS 140-3. If your organisation or a customer requires FIPS, that is the model to look at, not this one.

Durability7/10

Yubico lists IP68 water and dust resistance and crush resistance. The body is glass-fibre reinforced plastic with no batteries or moving parts. Those specs suit a key that lives on a keyring or in a bag.

Owner feedback

This comes from a single secondary blog that summarises Reddit and Mac forum posts.

Verdict

The YubiKey 5C NFC is a broad key. Its protocol list, USB-C plus NFC connections and IP68 body follow directly from Yubico's published specs. The limits are equally clear: no USB-A, no FIPS certification on the standard model, and a passkey count that depends on firmware. Buy it if its protocol list matches your needs. Choose the FIPS variant if compliance requires it.

Who should skip it
  • Buyers who need FIPS certification, who should look at the separate FIPS 5C NFC variant
  • People whose machines only have USB-A ports
  • Anyone who only needs basic FIDO2 passkeys and no PIV, OpenPGP or OTP
Full specifications
ProtocolsFIDO2 L2, CTAP 2.1, FIDO U2F, smart card (PIV), OpenPGP, OATH-HOTP, OATH-TOTP, Yubico OTP, challenge-response, static password
Connectors (USB-A, USB-C, NFC)USB-C 2.0; NFC (ISO 14443-3 Type A); no USB-A
Passkey slots100 discoverable FIDO2 credentials on firmware 5.7 and later; 25 on firmware 5.0 to 5.6; unlimited non-discoverable credentials
Firmware (open, updatable)Current listed firmware 5.8
Certification (FIDO level, FIPS)FIDO2 L2; AAL3 yes if FIPS not required by the environment; NIST validation N/A; standard model not FIPS-certified (FIPS 5C NFC is a separate variant)
Water and crush resistanceIP68 water and dust resistance; crush resistance; glass-fibre reinforced plastic body with no batteries or moving parts
Sources

Alternatives

Compare head to head