Hardware security keys add a physical step to account sign-ins, but connector type, NFC support, and protocol compatibility shape which one fits your devices. I name the Yubico YubiKey 5C NFC my best overall pick for its USB-C and NFC flexibility; the Yubico Security Key C NFC is a simpler FIDO-focused choice, while the Kensington VeriMark NFC+ USB-C adds fingerprint access. The main tradeoffs are broad authentication features versus a simpler setup, and one versatile key versus keeping a backup. I also compare USB-A, compact, biometric, bundle, and dual-connector options. Read on for the full breakdown and a guide to matching a key to your accounts and devices.
Get privacy and security gear delivered free — and shop member deals
- Fast, free delivery on millions of items
- Access to Prime Big Deal Days deals on October 6–7
- Prime Video, Amazon Music and more included
Key Takeaways
- YubiKey 5C NFC stands out as the most flexible single-key choice here, pairing USB-C with NFC for newer computers and compatible phones.
- Yubico Security Key C NFC favors straightforward FIDO sign-ins; buyers who need broader protocols should look at the YubiKey 5 line instead.
- The Kensington VeriMark NFC+ models add fingerprint authentication, but biometric convenience is useful only if its supported services and device setup match your needs.
- The Thetis FIDO2 2-Pack and YubiKey bundles make a separate backup key part of the purchase, while the single-key options require you to plan that redundancy yourself.
- OnlyKey Duo and Thetis Pro for Business address different fit problems: connector flexibility and business-oriented deployment, respectively.
| Yubico YubiKey 5C USB Security Key |  | Best Overall | Model: YubiKey 5C (Y-243) | Connection: USB-C | Protocols: FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, PIV, OpenPGP | VIEW LATEST PRICE | See Our Full Breakdown |
| Yubico YubiKey 5 NFC USB-A Security Key |  | Best for USB-A and NFC | Model: YubiKey 5 NFC (Y-237) | Connectivity: USB-A, NFC | Protocols: FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, PIV, OpenPGP | VIEW LATEST PRICE | See Our Full Breakdown |
| Thetis Nano-A FIDO2 USB-A Security Key |  | Best Compact Passkey Key | Interface: USB 2.0 Type-A | Standards: FIDO2, WebAuthn, CTAP2, OATH-TOTP | Passkey slots: 200 | VIEW LATEST PRICE | See Our Full Breakdown |
| Thetis FIDO2 Security Key, USB-A, 2-Pack |  | Best Spare-Key Set | Pack size: 2 keys | Connector: USB-A | Authentication standard: FIDO2 Level 1 | VIEW LATEST PRICE | See Our Full Breakdown |
| Kensington VeriMark NFC+ USB-A Biometric Fingerprint Security Key |  | Best Biometric Pick | Model: K64738WW | Authentication standards: FIDO2, WebAuthn | Connectivity: USB-A, NFC | VIEW LATEST PRICE | See Our Full Breakdown |
| Yubico Security Key NFC, USB-A and NFC FIDO Security Key | | Best for USB-A Devices | Connectivity: USB-A, NFC | Protocols: FIDO2/WebAuthn, FIDO U2F | Passkey slots: 100 | VIEW LATEST PRICE | See Our Full Breakdown |
| Yubico Security Key C NFC, USB-C and FIDO Certified |  | Best for USB-C Beginners | Model number: 100957 | Connectivity: USB-C, NFC | Authentication standards: FIDO2/WebAuthn, FIDO U2F | VIEW LATEST PRICE | See Our Full Breakdown |
| Yubico YubiKey 5C NFC Security Key |  | Best for Protocol Flexibility | Connectivity: USB-C, NFC | Supported protocols: FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, PIV smart card, OpenPGP | Passkey slots: 100 | VIEW LATEST PRICE | See Our Full Breakdown |
| Kensington VeriMark NFC+ USB-C Security Key (K64739WW) |  | Best for Cross-Platform Passkeys | Model number: K64739WW | Connectivity: USB-C, NFC | Certification: FIDO2 L2, FIDO CTAP 2.1 | VIEW LATEST PRICE | See Our Full Breakdown |
| Yubico YubiKey 5C NFC and Nano 5C Security Key Bundle |  | Best Two-Key Backup Bundle | Quantity: 2 security keys | Models: YubiKey 5C NFC and Nano 5C | Connectivity: USB-C, NFC | VIEW LATEST PRICE | See Our Full Breakdown |
| OnlyKey Duo USB-C and USB-A Security Key |  | Best for Password Management | Authentication methods: FIDO2/U2F, Yubico OTP, TOTP, challenge-response | Operating systems: Windows, Mac OS, Linux, Chromebook | Credential entry: Can enter saved login credentials | VIEW LATEST PRICE | See Our Full Breakdown |
| YubiKey 5C and Nano 5C Bundle – Two-Factor Authentication Security Key |  | Best Two-Key USB-C Bundle | Included keys: YubiKey 5C and Nano 5C | Interface: USB Type-C | Supported protocols: FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), OpenPGP | VIEW LATEST PRICE | See Our Full Breakdown |
| Yubico YubiKey 5Ci Multi-Factor Authentication Security Key |  | Best for Lightning and USB-C | Connectors: Lightning and USB-C | Authentication protocols: FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, PIV, OpenPGP | Firmware: 5.7 | VIEW LATEST PRICE | See Our Full Breakdown |
| Thetis Pro for Business FIDO2 Security Key with NFC, USB-A and USB-C |  | Best Port Flexibility | Certification: FIDO2 Level 1 | Authentication: FIDO2, passkeys, TOTP/HOTP | Connectivity: USB-A, USB-C, NFC | VIEW LATEST PRICE | See Our Full Breakdown |
| hardware security key | Connectivity | Durability | Dimensions |
|---|---|---|---|
| Yubico YubiKey 5C USB Security | — | Waterproof and crush-resistant | 0.49 × 1.16 × 0.2 in |
| Yubico YubiKey 5 NFC USB-A Sec | USB-A, NFC | — | 0.71 × 1.77 × 0.13 in |
| Thetis Nano-A FIDO2 USB-A Secu | — | — | 0.25 × 0.74 × 0.25 in |
| Thetis FIDO2 Security Key | — | Water-, crush-, and tamper-resistant | — |
| Kensington VeriMark NFC+ USB-A | USB-A, NFC | — | — |
| Yubico Security Key NFC | USB-A, NFC | Water-resistant, crush-resistant | — |
| Yubico Security Key C NFC | USB-C, NFC | — | 0.1 x 1.8 x 0.7 inches |
| Yubico YubiKey 5C NFC Security | USB-C, NFC | — | 0.15 × 0.7 × 1.77 inches |
| Kensington VeriMark NFC+ USB-C | USB-C, NFC | IP68 rated | 2.01 x 0.63 x 0.2 inches |
| Yubico YubiKey 5C NFC and Nano | USB-C, NFC | Waterproof, crush-resistant | — |
| OnlyKey Duo USB-C and USB-A Se | — | — | 1 x 0.29 x 0.58 inches |
| YubiKey 5C and Nano 5C Bundle | USB | Waterproof and crush-resistant | — |
| Yubico YubiKey 5Ci Multi-Facto | — | Waterproof and crush-resistant | — |
| Thetis Pro for Business FIDO2 | USB-A, USB-C, NFC | Water-, crush-, and tamper-resistant | — |
More Details on Our Top Picks
Yubico YubiKey 5C USB Security Key
The YubiKey 5C is my most versatile pick for someone who wants one USB-C key to protect accounts across several authentication systems. Alongside FIDO2/WebAuthn and U2F, it supports OTP, smart card, and OpenPGP protocols, giving it broader uses than the more focused Thetis Nano-A, which centers on passkeys and OATH-TOTP. Its waterproof, crush-resistant build suits a key carried daily, and it works without batteries or a network connection. The tradeoff is physical compatibility: it plugs directly into USB-C devices, so USB-A-only computers need an adapter. Like any single security key, it also creates an account recovery concern if lost; I’d pair it with a spare. Choose it for protocol range, but skip it if NFC or a second connector is a priority.
Pros:- Supports FIDO2/WebAuthn, U2F, OTP, PIV smart card, and OpenPGP
- Waterproof and crush-resistant for everyday carry
- Works without batteries or an internet connection
- Compatible with Windows, macOS, ChromeOS, and Linux
Cons:- Requires a USB-C connection or an adapter
- A lost key can complicate account access unless a spare or recovery method is set up
Best for: USB-C users who want one durable key for FIDO sign-ins plus smart card, OTP, or OpenPGP use
Not ideal for: People who need NFC authentication or rely on USB-A-only computers without an adapter
- Model:YubiKey 5C (Y-243)
- Connection:USB-C
- Protocols:FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, PIV, OpenPGP
- Supported systems:Windows, macOS, ChromeOS, Linux
- Dimensions:0.49 × 1.16 × 0.2 in
- Weight:0.2 oz
- Durability:Waterproof and crush-resistant
- Color:Black
Our verdict“Choose the YubiKey 5C if you want broad protocol support in a durable USB-C key and do not need NFC.”
Yubico YubiKey 5 NFC USB-A Security Key
If your computer still has USB-A and your phone supports NFC security-key sign-in, this YubiKey covers both without carrying a separate connector. Its USB-A and NFC options make it more flexible across devices than the USB-only YubiKey 5C, while its support for FIDO2, U2F, OTP, PIV, and OpenPGP offers the same broad protocol range. It needs no battery or network connection, which keeps everyday authentication simple. The key’s main limitation is the older USB-A plug: newer laptops and tablets may need an adapter, and listed operating-system compatibility names Linux and macOS rather than a wider set. NFC also depends on a compatible phone or reader. I’d pick it for a mixed USB-A and NFC setup, but favor a USB-C model if that is your only port.
Pros:- Authenticates over either USB-A or NFC
- Supports FIDO2/WebAuthn, U2F, OTP, PIV, and OpenPGP
- Does not need batteries or an internet connection
- Compact and light at 0.1 oz
Cons:- USB-A may require an adapter for newer devices
- NFC requires a compatible phone or reader
- Listed operating-system compatibility is limited to Linux and macOS
Best for: People who use USB-A computers and NFC-capable phones and want one key with broad protocol support
Not ideal for: USB-C-only device owners who do not want to carry an adapter
- Model:YubiKey 5 NFC (Y-237)
- Connectivity:USB-A, NFC
- Protocols:FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, PIV, OpenPGP
- Operating systems:Linux, macOS
- Dimensions:0.71 × 1.77 × 0.13 in
- Weight:0.1 oz
- Firmware:5.7
- Color:Black
Our verdict“Pick this model if USB-A and NFC match your devices; choose the YubiKey 5C for a USB-C-first setup.”
Thetis Nano-A FIDO2 USB-A Security Key
The Nano-A is the lineup’s space-saving choice for buyers who want a passkey key they can leave in a USB-A port or attach to a keychain. Its 200 passkey slots and 50 OATH-TOTP slots give it room for multiple credentials, while FIDO2, WebAuthn, and CTAP2 support covers passwordless sign-in on compatible services. That focus makes it simpler than the multi-protocol YubiKey 5 NFC, which also supports PIV and OpenPGP and can authenticate over NFC. The tradeoff is the Nano-A’s USB-A-only connection and service-dependent passkey support; its compact shape also makes it easy to leave behind if it stays plugged in. I’d choose it for a small, dedicated passkey key across varied operating systems, but not for users who need NFC or a smart card function.
Pros:- Stores up to 200 passkeys and 50 OATH-TOTP credentials
- Supports FIDO2, WebAuthn, and CTAP2
- Compact enough to stay plugged in or attach to a keychain
- Listed compatibility spans Windows, macOS, iOS, Android, Linux, and Chrome OS
Cons:- Requires a USB-A port
- Passkey sign-in depends on support from each website or service
- Does not list NFC, PIV, or OpenPGP support
Best for: Passkey users who want a tiny USB-A key with room for many credentials and broad operating-system compatibility
Not ideal for: People who need NFC, PIV, OpenPGP, or a connector other than USB-A
- Interface:USB 2.0 Type-A
- Standards:FIDO2, WebAuthn, CTAP2, OATH-TOTP
- Passkey slots:200
- OATH-TOTP slots:50
- Compatible systems:Windows, macOS, iOS, Android, Linux, Chrome OS
- Dimensions:0.25 × 0.74 × 0.25 in
- Color:Black
Our verdict“Choose the Nano-A for a tiny, passkey-focused USB-A key; choose the YubiKey 5 NFC for broader protocols and NFC.”
Thetis FIDO2 Security Key, USB-A, 2-Pack
This two-key set addresses one of the practical weak points of hardware authentication: losing a sole key can leave accounts harder to reach. Keeping one key as a backup makes it a more recovery-minded option than the single-unit Thetis Nano-A. Both keys support FIDO2 passkey authentication, and the rotating metal cover plus water-, crush-, and tamper-resistant construction are useful for keys carried outside a desk drawer. The narrower feature set is the tradeoff: the listing specifies FIDO2 Level 1 and USB-A, while the YubiKey 5 NFC supports additional protocols and NFC. Setup also involves the Thetis Manager App for the hardware PIN. I’d choose this pack for USB-A users who value a ready spare; skip it if you need NFC, ID Austria, or standard Windows Hello use outside the stated enterprise requirements.
Pros:- Includes two FIDO2 Level 1 security keys for a primary and backup
- Rotating metal cover protects the connector
- Water-, crush-, and tamper-resistant construction
- Needs no batteries or network connection
Cons:- USB-A only, with no NFC
- PIN setup requires the Thetis Manager App
- Windows Hello use has specific Windows Enterprise and Entra ID requirements
Best for: USB-A users who want a primary FIDO2 key and a matching spare for account recovery
Not ideal for: People who need NFC, ID Austria, or Windows Hello outside supported Windows Enterprise and Entra ID setups
- Pack size:2 keys
- Connector:USB-A
- Authentication standard:FIDO2 Level 1
- PIN setup:Thetis Manager App
- Power:No batteries required
- Network:No network connection required
- Durability:Water-, crush-, and tamper-resistant
- NFC:Not supported
Our verdict“Choose this set if you want a FIDO2 USB-A key and a spare; choose the YubiKey 5 NFC if NFC and wider protocol support matter more.”
Kensington VeriMark NFC+ USB-A Biometric Fingerprint Security Key
The VeriMark NFC+ adds fingerprint authentication to the lineup, making it the distinctive choice for someone who wants biometric sign-in alongside a hardware security key. It supports FIDO2 and WebAuthn over USB-A or NFC and works with listed Windows, macOS, and ChromeOS systems and several major browsers. Unlike the protocol-rich YubiKey 5C, its stated standards focus on FIDO2 and WebAuthn, so buyers seeking OTP, PIV, or OpenPGP should look elsewhere. NFC is useful for compatible phones, but it cannot help when the mobile device or reader lacks NFC support. The reinforced keyring hole suits daily carry; USB-A may still call for an adapter with newer devices. I’d select it for fingerprint-based authentication, while passkey users who do not need biometrics have more straightforward alternatives.
Pros:- Combines fingerprint authentication with FIDO2 and WebAuthn
- Supports both USB-A and NFC
- Works with listed Windows, macOS, and ChromeOS systems
- Reinforced keyring hole supports portable carry
Cons:- NFC use requires a compatible mobile device or reader
- USB-A may need an adapter on newer devices
- Listed standards do not include OTP, PIV, or OpenPGP
Best for: People who want fingerprint sign-in from a USB-A or NFC security key across supported computers and browsers
Not ideal for: Buyers who need OTP, PIV, OpenPGP, or a USB-C connector
- Model:K64738WW
- Authentication standards:FIDO2, WebAuthn
- Connectivity:USB-A, NFC
- Biometric authentication:Fingerprint
- Compatible systems:Windows, macOS, ChromeOS
- Compatible browsers:Chrome, Edge, Firefox, Safari
- Drivers:Not required
Our verdict“Choose the VeriMark NFC+ if fingerprint authentication is your priority; choose the YubiKey 5C for broader protocol support.”
Yubico Security Key NFC, USB-A and NFC FIDO Security Key
USB-A plus NFC makes this a practical pick for people who use an older laptop and a phone for account sign-ins. It supports FIDO2/WebAuthn and FIDO U2F, so the same small key can protect compatible accounts with phishing-resistant authentication and passkeys. Compared with the USB-C Yubico Security Key C NFC, this version fits computers with USB-A ports directly; the C model is the more convenient match for newer devices.
The tradeoff is a deliberately narrow feature set: it has no one-time password support and does not work with the Yubico Authenticator app. The broader YubiKey 5C NFC supports more authentication protocols, making it a better fit for buyers who need OTP, smart card, or OpenPGP features. With no battery or internet connection required and a water-resistant, crush-resistant design, this key favors simple FIDO logins over protocol flexibility.
Pros:- USB-A and NFC cover many older computers and compatible phones
- FIDO2/WebAuthn and FIDO U2F support phishing-resistant sign-ins
- Works without batteries or an internet connection
- Water-resistant and crush-resistant construction
Cons:- No one-time password support
- Not compatible with the Yubico Authenticator app
Best for: People who want a straightforward FIDO key for USB-A computers and NFC-capable phones
Not ideal for: Buyers who need one-time passwords, the Yubico Authenticator app, or the additional protocols supported by the YubiKey 5C NFC
- Connectivity:USB-A, NFC
- Protocols:FIDO2/WebAuthn, FIDO U2F
- Passkey slots:100
- Memory storage capacity:1 GB
- Read speed:1 MB/s
- Write speed:12 MB/s
- Color:Black
- Durability:Water-resistant, crush-resistant
Our verdict“Choose this key if you need simple FIDO authentication on USB-A computers and NFC phones; choose the YubiKey 5C NFC for broader protocol support.”
Yubico Security Key C NFC, USB-C and FIDO Certified
For someone setting up a first hardware key on newer devices, the Security Key C NFC keeps the choice simple: connect by USB-C on a computer or tap by NFC on a compatible phone. It supports FIDO2/WebAuthn and FIDO U2F for services such as Google, Microsoft, and Apple, with no battery or internet connection needed. Compared with the USB-A Yubico Security Key NFC, this model better fits USB-C laptops and tablets without an adapter.
That simplicity also limits what it can do. It does not support one-time passwords or the Yubico Authenticator app, while the YubiKey 5C NFC adds OTP, smart card, and OpenPGP support for people with more varied authentication needs. The waterproof, crush-resistant build suits a key carried daily, but buyers should check their devices for USB-C or NFC support before choosing it.
Pros:- USB-C and NFC support computer and compatible phone sign-ins
- FIDO2/WebAuthn and FIDO U2F work with many common services
- Needs no battery or internet connection
- Waterproof and crush-resistant construction
Cons:- No one-time password support
- Not compatible with the Yubico Authenticator app
- USB-C connection may not fit older USB-A-only devices
Best for: New hardware-key users with USB-C computers and NFC-capable phones who want FIDO sign-ins without extra setup
Not ideal for: People with USB-A-only computers or accounts that require OTP, smart card, OpenPGP, or Yubico Authenticator support
- Model number:100957
- Connectivity:USB-C, NFC
- Authentication standards:FIDO2/WebAuthn, FIDO U2F
- One-time password support:No
- Weight:0.16 ounces
- Dimensions:0.1 x 1.8 x 0.7 inches
- Firmware:5.7
- Manufactured and programmed:Manufactured in Sweden; programmed in the USA
Our verdict“Pick the Security Key C NFC for uncomplicated FIDO sign-ins on USB-C devices; choose the YubiKey 5C NFC if you need more authentication protocols.”
Yubico YubiKey 5C NFC Security Key
The YubiKey 5C NFC earns its place for buyers who need more than passkey and FIDO sign-ins. Alongside FIDO2/WebAuthn and FIDO U2F, it supports Yubico OTP, OATH-TOTP/HOTP, PIV smart card, and OpenPGP. That range can consolidate several authentication methods on one USB-C and NFC key. Compared with the simpler Yubico Security Key C NFC, it gives advanced users more ways to authenticate; the simpler model may be easier to choose if FIDO is all they need.
Its USB-C connector and NFC cover compatible computers and phones, and the key is water-resistant and crush-resistant. The main drawback is the planning needed for recovery: the product data recommends keeping a spare key to reduce the risk of account lockout if the primary is lost. Buyers who only need basic FIDO protection may find the extra protocols unnecessary, while those who use them gain more flexibility in a compact key.
Pros:- Supports FIDO, OTP, smart card, and OpenPGP protocols
- USB-C and NFC provide two connection methods
- Water-resistant and crush-resistant design
- Works without batteries or an internet connection
Cons:- A spare key is recommended to reduce account lockout risk
- Broader protocol support may be unnecessary for buyers who only need FIDO
Best for: Security-conscious users who need FIDO sign-ins alongside OTP, smart card, or OpenPGP authentication
Not ideal for: People who only need basic passkey protection or whose computers lack USB-C and whose phones lack NFC
- Connectivity:USB-C, NFC
- Supported protocols:FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, PIV smart card, OpenPGP
- Passkey slots:100
- Read speed:12 MB/s
- Dimensions:0.15 × 0.7 × 1.77 inches
- Color:Black
- Water resistant:Yes
- Crush resistant:Yes
Our verdict“Choose the YubiKey 5C NFC when you need several authentication standards in one key; the Security Key C NFC is simpler for FIDO-only use.”
Kensington VeriMark NFC+ USB-C Security Key (K64739WW)
The Kensington VeriMark NFC+ is a focused choice for buyers who want a modern passkey authenticator across a mix of operating systems. It supports FIDO2 and CTAP 2.1, with USB-C and NFC for sign-ins on Windows, macOS, iOS, Android, and ChromeOS. The listed FIDO2 L2 certification and IP68 rating speak to its standards support and resistance to dust and water. Compared with the Yubico Security Key C NFC, Kensington highlights broader named platform compatibility and current passkey standards.
The tradeoff is that the supplied details do not list the wider protocol range found on the YubiKey 5C NFC, so buyers needing OTP, smart card, or OpenPGP should look there instead. USB-C only can also be inconvenient for older computers without an adapter. Basic use needs no drivers, while advanced management features require optional Kensington software; this suits straightforward passkey use better than software-free administration of advanced settings.
Pros:- Supports FIDO2, CTAP 2.1, and passkeys
- USB-C and NFC connectivity
- Listed compatibility spans Windows, macOS, iOS, Android, and ChromeOS
- IP68-rated design and basic functionality without drivers
Cons:- USB-C only may require an adapter for older devices
- Advanced management features require optional Kensington software
- Listed feature set does not include the additional protocols offered by the YubiKey 5C NFC
Best for: People who use a mix of Windows, Mac, ChromeOS, iOS, or Android devices and want USB-C or NFC passkey sign-ins
Not ideal for: USB-A-only computer users and people who need OTP, smart card, or OpenPGP support
- Model number:K64739WW
- Connectivity:USB-C, NFC
- Certification:FIDO2 L2, FIDO CTAP 2.1
- Durability:IP68 rated
- Dimensions:2.01 x 0.63 x 0.2 inches
- Weight:0.176 ounces
- Manufacturer:Kensington
- Operating system compatibility:Windows, macOS, iOS, Android, ChromeOS
Our verdict“Choose this Kensington key for cross-platform FIDO passkeys and IP68 durability; the YubiKey 5C NFC is a better fit for additional authentication protocols.”
Yubico YubiKey 5C NFC and Nano 5C Security Key Bundle
This bundle pairs a YubiKey 5C NFC with a Nano 5C, giving buyers a daily key and a second key for backup. Both support a broad protocol set that includes FIDO2/WebAuthn, FIDO U2F, OTP, PIV, and OpenPGP. The main advantage over the single YubiKey 5C NFC is having two keys available for account recovery planning; compared with a bundle of two full-size keys, the Nano form offers a compact option for a compatible USB-C port.
There are practical limits: the supplied information does not specify which protocols work on each key, so buyers should confirm their intended uses for the Nano model. NFC requires a compatible device, and the USB-C connection rules out direct use on USB-A-only computers. Waterproof, crush-resistant construction helps with everyday carry, but this bundle makes the most sense when a second physical key is part of the buyer’s account security plan.
Pros:- Includes two keys for daily use and backup
- Supports FIDO, OTP, PIV, and OpenPGP standards
- USB-C and NFC offer computer and compatible mobile authentication
- Waterproof and crush-resistant construction
Cons:- USB-C connection may not fit devices without a USB-C port
- NFC requires a compatible phone or tablet
- Provided details do not specify protocol availability by individual key
Best for: USB-C users who want one key for regular access and a second key for backup across FIDO and other supported protocols
Not ideal for: People with USB-A-only computers or no compatible NFC devices who would not use the bundle’s second key
- Quantity:2 security keys
- Models:YubiKey 5C NFC and Nano 5C
- Connectivity:USB-C, NFC
- Supported protocols:FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, PIV, OpenPGP
- Compatible devices:USB-C computers; NFC smartphones and tablets
- Durability:Waterproof, crush-resistant
- Firmware:5.7
- Made in:Sweden
Our verdict“Choose this bundle if you want a second Yubico key for backup and can use USB-C or NFC; a single YubiKey 5C NFC is simpler if you need only one.”
OnlyKey Duo USB-C and USB-A Security Key
OnlyKey Duo suits buyers who want a security key to do more than confirm a login. Alongside FIDO2/U2F, it supports TOTP, Yubico OTP, and challenge-response, and can enter saved credentials across Windows, Mac, Linux, and Chromebook. That broader role sets it apart from the YubiKey 5C, which offers a wide protocol range but focuses on authentication rather than entering stored passwords.
The tradeoff is a more involved device to configure and use: buyers seeking a straightforward tap-to-authenticate key may prefer a simpler FIDO option. Its waterproof, tamper-resistant design and data erasure after ten failed unlock attempts add protection, though the listing gives no detail on recovery if that erasure is triggered. I would choose it for credential-management features, not merely as a spare login key.
Pros:- Combines password entry with FIDO2/U2F, OTP, TOTP, and challenge-response
- Supports Windows, Mac, Linux, and Chromebook
- Waterproof and described as tamper-resistant
- Erases stored data after ten failed unlock attempts
Cons:- Password-management features may add setup and daily-use complexity compared with a basic FIDO key
- Data erasure after failed unlocks could remove stored credentials, and the listing does not describe recovery
- The listed connector details do not specify which USB-C and USB-A devices are supported
Best for: People managing logins across several operating systems who want built-in password entry and multiple two-factor methods in one device
Not ideal for: Buyers who want a simple FIDO passkey key with minimal setup or who do not want to store credentials on the device
- Authentication methods:FIDO2/U2F, Yubico OTP, TOTP, challenge-response
- Operating systems:Windows, Mac OS, Linux, Chromebook
- Credential entry:Can enter saved login credentials
- Water resistance:Waterproof
- Security feature:Erases stored data after 10 failed unlock attempts
- Dimensions:1 x 0.29 x 0.58 inches
- Weight:0.01 kg
- Color:Black
Our verdict“Choose OnlyKey Duo if you want password entry and several authentication methods in one compact device and are prepared to manage its stored credentials.”
YubiKey 5C and Nano 5C Bundle – Two-Factor Authentication Security Key
This bundle pairs a YubiKey 5C for regular use with a Nano 5C designed to stay connected to a USB-C port. Both cover FIDO2/WebAuthn and a broad set of other protocols, including PIV and OpenPGP, giving technically minded users more account and credential options than the passkey-focused Yubico Security Key C NFC. Having two keys also gives the buyer a ready backup, which can reduce the risk of losing access when one key is misplaced.
The main constraint is the connector: both keys require USB-C, with no NFC or Lightning option in this bundle. That makes it less flexible across older computers and phones than the YubiKey 5Ci. Its protocol breadth is useful only where the buyer’s services and devices support those standards, so a simpler FIDO key may be a better fit for basic logins.
Pros:- Includes two keys, making it easier to keep a spare available
- Supports FIDO2/WebAuthn, OTP, OATH-TOTP/HOTP, PIV, and OpenPGP
- Nano form is suited to remaining in a USB-C port
- Waterproof and crush-resistant construction
Cons:- Both keys use USB-C, so older USB-A devices may need an adapter
- No NFC or Bluetooth connectivity
- The broad protocol set may be unnecessary for buyers who only need passkey sign-in
Best for: USB-C laptop users who want one portable daily key, one low-profile key to leave connected, and a backup with broad protocol support
Not ideal for: People who regularly authenticate on USB-A computers, Lightning iPhones, or devices where NFC is their preferred connection
- Included keys:YubiKey 5C and Nano 5C
- Interface:USB Type-C
- Supported protocols:FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), OpenPGP
- Firmware:5.7
- Compatible devices:USB-C enabled devices
- Connectivity:USB
- Durability:Waterproof and crush-resistant
- Items included:2
Our verdict“Pick this bundle if you want a USB-C daily key and a second, low-profile spare with support for more than basic FIDO sign-ins.”
Yubico YubiKey 5Ci Multi-Factor Authentication Security Key
The YubiKey 5Ci addresses a compatibility gap that most keys in this roundup leave open: it has both Lightning and USB-C connectors. That makes it a candidate for buyers who need a physical key across compatible iPhones and USB-C devices, while the USB-C-only YubiKey bundle is a better match for people who do not need Lightning. It also supports FIDO2/WebAuthn, U2F, OTP, PIV, and OpenPGP, so it can serve accounts and workflows beyond passkey sign-in.
Connector choice alone does not guarantee that every app or account will accept the key; compatibility depends on the service and device. The Thetis Pro offers USB-A, USB-C, and NFC instead, which may suit households with mixed ports better. The 5Ci also lacks a second key in the package, so buyers should plan a separate backup to avoid being stranded if it is lost.
Pros:- Combines Lightning and USB-C connectors in one key
- Supports FIDO2/WebAuthn, U2F, OTP, PIV, and OpenPGP
- Needs no battery or internet connection
- Waterproof and crush-resistant
Cons:- Works only with compatible devices and accounts
- Does not provide USB-A or NFC connectivity
- A separate spare is advisable to reduce lockout risk
Best for: People with a compatible Lightning iPhone and USB-C computer who want one hardware key to cover both connector types
Not ideal for: Buyers who need USB-A or NFC access, or who want a packaged spare key for account recovery
- Connectors:Lightning and USB-C
- Authentication protocols:FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, PIV, OpenPGP
- Firmware:5.7
- Durability:Waterproof and crush-resistant
- Power and connection:No batteries or internet connection required
- Manufactured in:Sweden
- Programmed in:USA
Our verdict“Choose the 5Ci if Lightning and USB-C access in one key matters more than NFC, USB-A, or an included backup.”
Thetis Pro for Business FIDO2 Security Key with NFC, USB-A and USB-C
The Thetis Pro covers more connection types than the USB-C-only YubiKey bundle: it supports USB-A, USB-C, and NFC for mobile authentication. That can make it a practical shared key for people moving between older computers, newer laptops, and phones. It supports FIDO2 passkeys plus TOTP/HOTP, and its companion app allows hardware PIN setup, giving buyers a choice between phishing-resistant sign-in and code-based authentication.
Its NFC support has a clear boundary: it is for mobile devices, not macOS or Windows. Windows Hello also requires a compatible Enterprise edition, and ID Austria is unsupported, so buyers in those use cases should check alternatives. Compared with the YubiKey 5C and Nano 5C bundle, the Thetis trades that bundle’s second key and broader listed protocols for wider connector options and a rotating metal cover. It is a versatile fit, but not a no-checks compatibility choice.
Pros:- Offers USB-A, USB-C, and mobile NFC connectivity
- Supports FIDO2 passkeys and TOTP/HOTP codes
- Companion app supports hardware PIN setup
- Rotating metal cover with water-, crush-, and tamper-resistant design
Cons:- NFC authentication is not supported on macOS or Windows
- Windows Hello requires a compatible Windows Enterprise edition
- Does not support ID Austria
Best for: People who switch between USB-A and USB-C computers and want NFC authentication on a compatible iPhone or Android device
Not ideal for: macOS or Windows users who expect NFC login, Windows Hello users without supported Enterprise edition, or anyone needing ID Austria
- Certification:FIDO2 Level 1
- Authentication:FIDO2, passkeys, TOTP/HOTP
- Connectivity:USB-A, USB-C, NFC
- Compatible devices:PC, Mac, iPhone, Android
- Companion app:Thetis Manager App
- Power:No batteries required
- Durability:Water-, crush-, and tamper-resistant
- NFC limitation:Mobile authentication only; not supported on macOS or Windows
- Windows Hello limitation:Requires a Windows Enterprise edition that supports Entra ID
Our verdict“Choose the Thetis Pro if your devices span USB-A, USB-C, and mobile NFC, provided its platform and service limitations fit your needs.”
How We Picked
I compared these keys on the factors that affect everyday account protection: supported authentication standards, connector and NFC options, device fit, physical design, and the practicality of keeping a backup. A key earns a higher place when its capabilities solve common cross-device needs without adding unnecessary setup complexity. I also considered whether a product is best understood as a focused FIDO sign-in key, a broader authentication tool, a biometric option, or a bundle.
The ranking reflects those differences rather than treating every key as interchangeable. The YubiKey 5C NFC leads for its mix of USB-C and NFC and broader feature set; focused keys rank well for buyers who want simpler FIDO authentication. Bundles and business-oriented models suit narrower needs, while connector-specific and compact picks trade versatility for a more particular device fit. Before buying, check the protocols your services support and the ports on the devices you actually use.
| hardware security key | Durability | Connectivity |
|---|---|---|
| Yubico YubiKey 5C USB Security | Waterproof and crush-resistant | — |
| Yubico YubiKey 5 NFC USB-A Sec | — | USB-A, NFC |
| Thetis Nano-A FIDO2 USB-A Secu | — | — |
| Thetis FIDO2 Security Key | Water-, crush-, and tamper-resistant | — |
| Kensington VeriMark NFC+ USB-A | — | USB-A, NFC |
| Yubico Security Key NFC | Water-resistant, crush-resistant | USB-A, NFC |
| Yubico Security Key C NFC | — | USB-C, NFC |
| Yubico YubiKey 5C NFC Security | — | USB-C, NFC |
| Kensington VeriMark NFC+ USB-C | IP68 rated | USB-C, NFC |
| Yubico YubiKey 5C NFC and Nano | Waterproof, crush-resistant | USB-C, NFC |
| OnlyKey Duo USB-C and USB-A Se | — | — |
| YubiKey 5C and Nano 5C Bundle | Waterproof and crush-resistant | USB |
| Yubico YubiKey 5Ci Multi-Facto | Waterproof and crush-resistant | — |
| Thetis Pro for Business FIDO2 | Water-, crush-, and tamper-resistant | USB-A, USB-C, NFC |
Factors to Consider When Choosing Hardware Security Keys
Choosing a key starts with how you sign in and which devices you carry. These broader checks can prevent a mismatch that product features alone may not reveal.
Match Authentication Standards to Your Accounts
“Security key” can describe products with different protocol support, so check the sign-in methods required by your most important services. FIDO2 and WebAuthn support is relevant for passwordless sign-ins and phishing-resistant second factors where services offer them. Some keys support additional authentication protocols, which can matter for specialized workplace or legacy systems. A broader feature set gives you room to use more services, but it can also mean paying for capabilities you never use. Make a short list of the accounts you want to protect and confirm their requirements before choosing a model. Do not assume that two keys from the same brand support the same protocols.
Choose Connectors for Your Real Device Mix
USB-A suits many older computers, while USB-C is common on newer laptops and phones. NFC can make phone sign-ins easier when both the phone and service support the key’s authentication method. A dual-connector key or bundle may bridge a mixed device fleet, but extra connector options matter less if you use only one computer. Check whether a phone case, port placement, or adapter makes a direct connection awkward. Adapters can help, though they add another item to carry and may not suit every setup. Prioritize the devices you sign into most often rather than choosing by connector count alone.
Plan for Losing or Replacing a Key
A hardware key can be misplaced or damaged, so decide how you will regain access before relying on one. Many services let you register more than one key; a spare stored separately can prevent a lost primary key from becoming an account recovery problem. Two-packs and bundles make that backup easy to buy alongside the main key, but you still need to register both with each account. Store recovery codes in a safe place and learn each service’s recovery process. A second key should be compatible with the accounts and devices you need to reach. Treat backup planning as part of setup, not a task to postpone until something goes wrong.
Decide Whether Biometrics Fit Your Routine
Fingerprint keys add a biometric step that may feel convenient if you prefer touch confirmation over tapping a key or entering another factor. Their usefulness depends on the services and operating systems you use, along with how they handle biometric sign-in. A fingerprint sensor does not automatically mean every account can use the same flow. Some buyers may prefer a non-biometric key because it keeps the interaction simpler or avoids maintaining another enrollment. Check the product’s supported standards and the service’s instructions before treating fingerprint access as a deciding feature. Choose biometrics for a concrete workflow benefit, not as a substitute for checking compatibility.
Balance Broad Features Against Simplicity
Some keys are designed around FIDO sign-ins, while others support a wider range of authentication functions. A focused model can be easier to match to a straightforward goal such as securing supported online accounts. Broader capabilities make more sense when you already know you need the additional protocols or workflows. Extra features do not improve protection for a service that cannot use them. Buyers sometimes select the most feature-rich option without checking whether their accounts support those features. Start with the job the key must do today, then leave room for likely device or account changes.
Think Through Portability and Physical Fit
A key that stays on a keyring is available when you need it, but its size and attachment style affect daily comfort. Nano designs sit discreetly in a port, which can suit a computer that remains in one place; they are less convenient to move between devices. A small key can also be easier to overlook or leave connected. Consider whether you want a portable key for phone and laptop use or a low-profile key dedicated to one machine. Check how the key attaches to your existing keys and whether its connector will be exposed to pressure in a bag. Physical convenience matters because a cumbersome key is less likely to be carried consistently.
Frequently Asked Questions
Should I buy a pair of keys or start with one?
A pair makes sense if you plan to protect accounts that allow multiple registered keys, because you can keep one as a spare. A single key may suit a trial setup, but register recovery options before making it your only route into an important account. Confirm that the service supports more than one key and check how it handles account recovery. Keep the backup somewhere separate from your everyday key to reduce the chance of losing both together. The Thetis 2-Pack and Yubico bundles offer paired hardware, though you still need to complete account registration for each key.
Will one key work with both my phone and computer?
That depends on the key’s connector, NFC support, your devices, and the sign-in method each service offers. USB-C models can connect directly to many newer computers and phones, while NFC can provide another route on compatible phones. USB-A keys may require an adapter on newer devices, and adapter support can vary by setup. A USB-C and NFC combination, such as the YubiKey 5C NFC, covers more connection situations than a single-connector model. Check your phone’s security-key instructions and the account’s supported methods before choosing.
Is a FIDO-focused key enough, or do I need a broader model?
A FIDO-focused key can be enough if your goal is signing in to services that support FIDO2 or WebAuthn. A broader model may suit you better if you have a specific need for other authentication protocols or workflows. More capabilities do not guarantee compatibility with every account, because each service chooses which methods it accepts. Write down the services and sign-in tasks you need to support, then compare those requirements with the manufacturer’s protocol list. If you cannot name a use for extra protocols, a focused key may be the simpler match.
Does NFC matter if my key has USB-C?
NFC can be useful when you want to authenticate with a compatible phone without plugging in the key. USB-C remains valuable for direct connections to devices that support the relevant authentication method. You may not need NFC if you sign in only on a computer or your phone workflow uses a different supported method. Confirm both the phone’s NFC capability and the service’s instructions, since having NFC on the key alone does not establish compatibility. Buyers who switch between phones and computers may find both connection options more adaptable.
Should I choose a fingerprint key over a standard security key?
Choose a fingerprint model when touch-based confirmation fits your routine and the services you use support the relevant sign-in flow. A standard key can be a more direct choice if you want FIDO sign-ins without biometric enrollment. Fingerprint support does not remove the need to check operating system, service, and protocol compatibility. Consider who will use the key, whether they can enroll a fingerprint comfortably, and what backup method the account offers. The Kensington VeriMark NFC+ options are worth comparing for biometric access, while the Yubico and Thetis FIDO picks suit buyers who prioritize other features.
Conclusion
For a flexible everyday choice, I recommend the Yubico YubiKey 5C NFC as best overall, especially for buyers moving between USB-C devices and compatible phones. The Yubico Security Key C NFC is my best value fit for people who want a more focused FIDO sign-in key, while the YubiKey 5C models suit buyers who need broader authentication features. For beginners, I would start with a key that matches their main device and account requirements, then register a spare; the Thetis FIDO2 2-Pack makes that backup approach straightforward. Choose a Kensington VeriMark NFC+ for fingerprint access, the OnlyKey Duo for a USB-A and USB-C mix, or the Thetis Pro for Business when its business-oriented fit matches your deployment. Check service compatibility and recovery options before settling on any one key.
Halloween Picks
halloween
As an affiliate, we earn on qualifying purchases.
