Yubikey
YubicoBitwardenGPG ToolsDonate Coffee
General
General
  • Introduction
    • Getting Started
    • Terms
    • FAQ
    • NFC vs FIPS
    • Securing Your Footprint
  • Tutorials
    • ⭕Bitwarden
    • ⭕Bitlocker
    • ⭕Code Signing
    • ⭕EFS
    • ⭕Github Desktop
    • ⭕KeePassXC
    • ⭕SSH + PuTTY-CAC
      • 🟣PIV-PKCS
      • 🟣PIV-CAPI
      • 🟣GPG
      • ⭕Configs
        • 📄gpg.conf
        • 📄gpg-agent.conf
        • 📄scdaemon.conf
    • ⭕Battle.net OTP
    • ⭕Steam OTP
    • ⭕Veracrypt
  • GUIDES
    • ⭕Setting up a New Key
      • 🟣Minimal Version
    • ⭕Securing Your Credentials
    • ⭕Setting up CLI / ykman
    • ⭕Setting up CLI / GPG
    • ⭕Mysterious Certificates
    • ⭕Understanding PINs
      • 🟣FIDO2
      • 🟣GPG
      • 🟣PIV
    • ⭕Yubikey Firmware
  • CHEATSHEETS
    • ⭕Environment Variables
    • ⭕Files/Abbreviations
    • ⭕OpenSSL
      • 🟣slot_9a.cnf
      • 🟣slot_9c.cnf
      • 🟣slot_9d.cnf
      • 🟣slot_9e.cnf
    • ⭕PEM Types
    • ⭕Usage Types
      • 🟣KeyUsage
      • 🟣KeyUsageProperty
      • 🟣extendedKeyUsage
      • 🟣KeyProtection
      • 🟣KeySpec
Powered by GitBook
On this page
  • Security Series
  • Yubikey 5 Series

Was this helpful?

  1. GUIDES

Understanding PINs

PINs can be a confusing aspect of a Yubikey. Here is a brief explanation of all the PINS associated to the Yubikey.

PreviousMysterious CertificatesNextFIDO2

Last updated 2 years ago

Was this helpful?

Review the various PINs below and ensure you have the correct device:

PINs
Interfaces
Color

1

FIDO2 (1)

Blue As of 2023, they now come in black.

5

FIDO2 (1)

GPG (2)

PIV (2)

Black

If you are unsure if you have the Security Series device, or the 5 Series. Look at the back of the device near the USB PINs.

Device
Printed On Back of Key

"FIDO"

8-9 digit number Barcode

"FIPS" 8-9 digit number Barcode

As of 2023, Yubico has announced an updated version of the Security Series keys which are now black and look almost identical to the Yubikey 5 Series keys.

Prior to 2023, the Security Series keys were blue.

Security Series

Interface
PINs
Brief Description

1 PIN

Authenticate with websites such as Microsoft, Google, Bitwarden, PayPal, etc.

Yubikey 5 Series

In total, your Yubikey 5 has 5 PINs, 1 Management Key, and 1 Reset Code.

Interface
PINs
Brief Description

1 PIN

Authenticate with websites such as Microsoft, Google, Bitwarden, PayPal, etc. No default PIN This PIN is set the first time you link your Yubikey to a website or Windows.

2 PINs 1 Reset Code

Allows you to do tasks such as encrypting / decrypting files, sign Github commits, and also supports SSH. Defaults User PIN: 123456 Admin PIN: 12345678

2 PINs 1 Management Key

Do things like import x509 certificates / keypairs to your Yubikey. Can be used for services such as Bitlocker, Veracrypt, EFS, SSH, etc. Defaults PIN: 123456 PUK: 12345678

If you have no need for things like GPG or PIV, you may never even cross paths with these PINs. You might only want to just sign into websites, and if so, then you'll only ever be asked for your FIDO2 PIN.

Automatically assume that if you've never messed with GPG or PIV on your Yubikey and your device asks for a PIN, it will be asking for your FIDO2 pin.

Let's break down the different interface PINs. Click an interface below to learn about each one:

The is Yubico's more affordable model security device which comes in at nearly half the price of the Yubikey 5. However, it comes with less features, and is primarily for FIDO2 / Webauthn. This device only has 1 PIN associated to the FIDO2 module. These keys do not include interfaces such as GPG, PIV, etc.

The has several technologies (or interfaces) included. Each of those technologies do different things so that you have a wide variety of options on how to use your Yubikey.

⭕
For more information, view the official page.
Yubikey Security Series
FIDO2
FIDO2
GPG
PIV
FIDO2
GPG
Security Series
5 Series
Security Series
5 NFC Series
5 FIPS Series
PIV
The back of a Yubikey 5 NFC Series security device
Yubikey 5 Series