Classification
| Yubico YubiKey 5C NFC
|
| Classification
|
| Grade
|
A+
|
| Calculator version
|
1
|
| Classification date
|
2025-10-09
|
| Information
|
| Name
|
Yubico YubiKey 5C NFC
|
| Brand by Parent
|
Yubico by Yubico AB (Sweden/USA)
|
| Generation
|
5th generation
|
| Model(s)
|
5C NFC
|
| Release date
|
2019-08-20
|
| Type/Category
|
Hardware security key (IoT identity device)
|
| Website
|
[1]
|
| Status
|
In sale
|
| More
|
| Dimensions
|
18 × 45 × 3.3 mm
|
| Mass
|
3 g
|
| Operating system
|
Proprietary YubiOS firmware
|
| Companion App
|
Yubico Authenticator (iOS/Android/Desktop)
|
| CPU
|
Secure element microcontroller
|
| GPU
|
None
|
| Memory
|
Secure flash memory
|
| Storage
|
Internal secure element
|
| Battery
|
None (powered via USB or NFC field)
|
| Power
|
USB-C connector or NFC
|
| Charging
|
Not applicable
|
| Display
|
None
|
| Camera
|
None
|
| Sound
|
None
|
| Connectivity
|
USB-C, NFC
|
| Device
|
| Criterion
|
Value
|
Proof(s)
|
Comment
|
| Known hardware tampering
|
None
|
[2]
|
|
| Known vulnerabilities
|
None
|
[3]
|
|
| Prior attacks
|
None
|
[4]
|
|
| Updatability
|
Very common
|
[5]
|
|
| Category score
|
1
|
| System
|
| Criterion
|
Value
|
Proof(s)
|
Comment
|
| Authentication with other systems
|
Full
|
[6]
|
|
| Communications
|
Encrypted with up-to-date encryption
|
[7]
|
|
| Storage
|
Encrypted with up-to-date encryption
|
[8]
|
|
| Category score
|
1
|
| User Authentication
|
| Criterion
|
Value
|
Proof(s)
|
Comment
|
| Account management
|
Full
|
[9]
|
|
| Authentication
|
Secure
|
[10]
|
|
| Brute-force protection
|
Exist
|
[11]
|
|
| Event logging
|
Access event logged
|
[12]
|
|
| Passwords
|
Require change after setup with complexity requirements
|
[13]
|
|
| Category score
|
1
|
The YubiKey 5C NFC is a hardware security key that provides strong two-factor, multi-factor, and passwordless authentication. Supporting USB-C and NFC, it works across laptops and smartphones, making it versatile for both enterprise and personal security. Unlike typical IoT gadgets, it is purpose-built for identity protection and uses a secure element microcontroller to resist tampering. Its firmware is not upgradable by design, reducing attack vectors.
