Business Wire

Yubico’s Key Product Innovations Empower Enterprise Security and Phishing-Resistant Passwordless Authentication at Scale

Share

Today Yubico (NASDAQ: YUBICO), the leading provider of hardware authentication security keys, announced the upcoming release of YubiKey 5.7 firmware for the YubiKey 5 Series, Security Key Series and Security Key Series - Enterprise Edition. With a focus on enterprise needs, these updates reinforce Yubico’s commitment to providing secure, simple, and scalable authentication solutions. Security keys with firmware 5.7 will be available to purchase in late May 2024, offering enhanced features such as improved PIN complexity, enterprise attestation, and expanded passkey credentials storage. These updates empower organizations to adopt passwordless-first, modern authentication, fostering phishing-resistant users worldwide.

As part of Yubico’s goal of helping enterprises raise the bar for security with greater flexibility, the company also announced the availability of Yubico Authenticator 7 which will support the upcoming YubiKey 5.7 features.

“Organizations are continuing to face a surge in the variety and complexity of cyber threats at historical rates, often fueled by compromised employee login credentials, frequently resulting from attacks such as phishing. This trend is exacerbated by the rise in use of Artificial Intelligence (AI),” said Jeff Wallace, senior vice president of product at Yubico. “We’re excited to continue offering best-in-class solutions that protect organizations and accelerate their transition to passwordless with the latest enterprise-focused updates to the YubiKey. We’re confident that organizations are now better equipped than ever to enforce compliance requirements and elevate their security posture throughout their organization.”

YubiKey 5.7: Accelerating enterprises to passwordless

To help organizations tackle this challenge, Yubico’s key updates and enhancements to the YubiKey 5 Series and Security Key Series* include:

  • Enhanced PIN complexity across all YubiKey applications
    • Block simple patterns and common PINs at the hardware level to enable compliance with upcoming NIST requirements and corporate mandates. This includes FIDO2, PIV, and OpenPGP.
  • Enterprise attestation
    • Allow organizations to enforce the usage of YubiKeys that they purchased via custom programmed keys with enterprise attestation. Working in conjunction with identity providers, this capability can also facilitate the retrieval of unique identifiers during FIDO2 registration to streamline asset tracking and account recovery.
  • FIDO2 enhancements
    • Empower organizations to enforce compliance requirements and elevate security measures surrounding PIN usage. YubiKey 5.7 implements FIDO Client-to-Authenticator Protocol (CTAP) 2.1, embracing the latest FIDO2 protocol features such as Force PIN Change and Minimum PIN Length.
  • Expanded passkey and passwordless storage
    • Provide ample storage space to meet authentication needs while maintaining strong security standards. More storage for FIDO2 discoverable credentials (passkeys) and OATH one-time passwords will now accommodate up to 100 passkeys, 24 PIV certificates, 64 OATH seeds, and 2 OTP seeds at once for a total of 190 credentials.
  • Expansion and enhancement of public key algorithms for PIV applications
    • Align with DoD memo requirements and offer advanced key management functions, enhancing flexibility for organizations through support of larger RSA keys (RSA-3072 and RSA-4096), as well as Ed25519 and X25519 key types.
  • Migration to Yubico’s own cryptographic library
    • Yubico has developed a library in-house that performs the underlying cryptographic operations (decryption, signing, etc.) for RSA and ECC.

“The new features within 5.7 allow enterprises to streamline critical processes such as asset tracking and account recovery, while also enhancing flexibility,” said Wallace. “These updates empower enterprises with the latest authentication advancements and tools to build specific strategies for creating phishing-resistant users and mitigating phishing threats for employees, external identities, and customers.”

Capabilities in the new 5.7 YubiKeys also align with recent U.S. Government memo requirements on adopting phishing-resistant MFA and offer advanced key management functions. Compliance with upcoming NIST requirements and corporate mandates is also supported by enforcing the blocking of simple patterns and common PINs at the hardware level.

*Note: Smart Card/PIV capabilities, OATH and OTP credentials are not available on any Security Key Series thus these updates are not applicable. Enterprise attestation is available on the YubiKey 5 Series and Security Key Series - Enterprise Edition. See here for more details.

Yubico Authenticator 7: Hardware-backed authenticator app across desktop and mobile

Aligned with the 5.7 firmware release, significant updates within Yubico Authenticator 7 launched today in support of managing these new features. This new version enables use of the new public key algorithms for PIV, bringing more advanced management options and streamlines the interface for a better user experience when handling many credentials. Additionally, it adds localization with official support for French and Japanese, with additional community-provided translations. The app is now available for all major desktop platforms, as well as for Android. Enhanced features for iOS will be coming in the next version of the iOS application. It's the perfect companion to the new YubiKey 5.7, with its expanded credential storage.

The Yubico Authenticator delivers strong security by enabling users to store credentials on a YubiKey instead of a mobile phone, thereby significantly removing risks posed by remote attackers targeting software-based authenticator apps. By incorporating hardware-backed strong two-factor authentication in the YubiKey, credentials stays safe and the bar for security is raised while delivering the convenience of an authenticator app.

For more information on today’s innovation announcements from Yubico, visit here. To get the Yubico Authenticator 7 app, visit here.

About Yubico

Yubico (Nasdaq First North Growth Market Stockholm: YUBICO), the inventor of the YubiKey, offers the gold standard for phishing-resistant multi-factor authentication (MFA), stopping account takeovers in their tracks and making secure login easy and available for everyone. Since the company was founded in 2007, it has been a leader in setting global standards for secure access to computers, mobile devices, servers, browsers, and internet accounts. Yubico is a creator and core contributor to the FIDO2, WebAuthn, and FIDO Universal 2nd Factor (U2F) open authentication standards, and is a pioneer in delivering modern, hardware-based passkey authentication security at scale to customers in over 160 countries.

Yubico’s solutions enable passwordless logins using the most secure form of passkey technology. YubiKeys work out-of-the-box across hundreds of consumer and enterprise applications and services, delivering strong security with a fast and easy experience.

As part of its mission to make the internet more secure for everyone, Yubico donates YubiKeys to organizations helping at-risk individuals through the philanthropic initiative, Secure it Forward. The company is headquartered in Stockholm and Santa Clara, CA. For more information on Yubico, visit us at www.yubico.com.

To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.

Contact information

Yubico Communications Team
press@yubico.com

About Business Wire

Business Wire
Business Wire
24 Martin Lane
EC4R 0DR London

+44 20 7626 1982http://www.businesswire.co.uk

(c) 2018 Business Wire, Inc., All rights reserved.

Business Wire, a Berkshire Hathaway company, is the global leader in multiplatform press release distribution.

Subscribe to releases from Business Wire

Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.

Latest releases from Business Wire

H.I.G. WhiteHorse Europe Refinances Astek30.5.2024 12:00:00 CEST | Press release

H.I.G. WhiteHorse Europe, a credit affiliate of global investment firm H.I.G. Capital ("H.I.G."), is pleased to announce that it has co-arranged a new €450 million financing package for Astek (the “Company” or the “Group”). Founded in 1988 and controlled by its founder Jean-Luc Bernard, Astek is a global player in engineering and technology consulting. Headquartered in Boulogne-Billancourt, France, Astek operates in more than 20 countries with 8400 employees. Led by Julien Gavaldon since 2013, the Group has experienced significant growth as a result of organic activity and ten strategic acquisitions, over the past four years. The Group has developed leading market positions in its key geographies, notably in France, Poland, and Canada, in addition to growing positions in Northern and Western Europe, the Middle East, and Asia. In 2021, H.I.G. WhiteHorse Europe acted as the sole arranger of a €170 million financing package used to refinance the Group’s existing loans and provide addition

Mastercard Opens European Cyber Resilience Centre in Belgium30.5.2024 11:35:00 CEST | Press release

Mastercard today announced the opening of its European Cyber Resilience Centre (ECRC) at its European Headquarters reaffirming the company’s commitment to combatting cyber threats and enhancing resilience in the region. The new state-of-the-art centre will sharpen defenses against cyber threats, speed up response times and serve as a hub for thought leadership in cybersecurity, fostering collaboration between the public and private sectors. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20240530937171/en/ Mastercard European Cyber Resilience Centre Opening in Waterloo, Belgium. (From left to right) Michael Miebach, Chief Executive Officer, Mastercard, Mathieu Michel, Belgian State Secretary for Digitalisation, Mark Barnett, President, Mastercard Europe, Catherine De Bolle, Executive Director, Europol. Photo by: Nicolas Peeters. (Photo: Business Wire) With continuous digitization and unprecedented levels of connectivity, cyberc

New Poll Shows Three Quarters of Smokers Believe Vaping Misinformation30.5.2024 11:20:00 CEST | Press release

The global network We Are Innovation has today published the results of a poll showing a staggering three-quarters of smokers wrongly believe vaping is just as harmful as smoking. Recent research conducted by Ipsos reveals that 74 percent of smokers worldwide believe that vaping is at least as harmful as smoking. This alarming Misperception Epidemic perpetuates a cycle of preventable illness and death, as individuals are deterred from switching to safer alternatives. The potential consequences of this are dire. Countries that have successfully reduced smoking prevalence have empowered smokers to access alternative products, such as vapes and nicotine pouches, accompanied by accurate information about their relative risks. Sweden has lowered smoking rates to 5.6 percent, just above the threshold at which a country becomes officially “smoke-free.” At the same time, New Zealand, which has more recently adopted smoke-free alternative products, has slashed smoking prevalence to 6.5 percent

New Tholos Foundation Report Reveals Flavour Bans Threaten Europe's Smoke-Free Ambition30.5.2024 11:15:00 CEST | Press release

The Tholos Foundation, an international non-governmental organization dedicated to advocating for consumers, today launched three white papers exposing the risks of banning flavours in vaping products at an event in Brussels hosted by Parliament Magazine and featuring contributions from Swedish MEP Johan Nissinen. The reports cover the impact of flavour bans in the real world, best practices to educate adult smokers and restrict underage usage, and analyse the public response to the European Commission’s 2023 public consultation. Surveys commissioned by the Tholos Foundation and conducted by Ipsos in multiple countries have shown that a significant majority of vapers use flavours other than tobacco to help reduce and quit smoking. Notably, 83% of vapers in Germany stated that flavours are crucial in their decision to vape, with similar high percentages reported in Belgium, the Netherlands, and Sweden. The research also showed that, in countries where flavours were banned, many vapers w

The LYCRA Company participates in panel at the United Nations Fashion and Lifestyle Network Annual Meeting30.5.2024 11:00:00 CEST | Press release

The LYCRA Company, a global leader in developing innovative and sustainable fiber and technology solutions for the apparel and personal care industries, is a 2024 thought leadership partner of the United Nations Fashion and Lifestyle Network and will be participating in the third annual meeting on June 3 at the United Nations (UN) Headquarters in New York City. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20240530471627/en/ Jean Hegedus, The LYCRA Company’s sustainability director, will be joining the panel discussion on “Elevating Fashion: Sustainable Practices and Strategic Insights in the Apparel Industry” at the United Nations Fashion and Lifestyle Network annual meeting on June 3. (Photo: Business Wire) Jean Hegedus, The LYCRA Company’s sustainability director, will be joining the panel discussion on “Elevating Fashion: Sustainable Practices and Strategic Insights in the Apparel Industry.” She will highlight The LYCRA C

HiddenA line styled icon from Orion Icon Library.Eye