Yubico Opens YubiID Early Access and Post-Quantum YubiKey Beta
Summary
Yubico opened limited early access to YubiID, which links identity verification with credential enrollment and recovery across identity platforms. It also started a public beta for a post-quantum-ready YubiKey with non-upgradeable firmware.
Key points
- YubiID connects identity verification to initial credential enrollment and account recovery, including enrollment of replacement credentials.
- The service integrates with Microsoft Entra, Okta, and Ping, and supports credentials on YubiKeys, mobile devices, and homegrown identity systems.
- Organizations can use YubiID's baseline verification capability or their own process; integrations with Clear, Nametag, and HYPR are planned.
- YubiID is in limited early access. Yubico is working with unnamed large-organization design partners and targets general availability in the first half of 2027; pricing was not disclosed.
- Separately, Yubico opened a public beta for a YubiKey supporting NIST-standardized post-quantum algorithms, but did not specify which algorithms.
- The beta keys cannot receive firmware upgrades, so organizations may need to replace them if different algorithms are required. FIPS validation submission is expected within about a year, but is not guaranteed.
Article Details
- Event Type
- Yubico launched limited early access to YubiID, a subscription service for identity verification, credential enrollment, and account recovery, and announced a public beta for a post-quantum-ready YubiKey.
- Impact
- YubiID is intended to connect identity verification with initial and replacement credential enrollment across existing identity platforms, addressing impersonation risks during onboarding and account recovery. It supports YubiKeys and mobile devices; the article reports no quantified security or operational impact. YubiID is in limited early access, with general availability hoped for in the first half of 2027. The post-quantum YubiKey is only a beta, and its firmware cannot be upgraded, so different algorithm requirements could require replacing devices.
People
Andrew ShikiarFIDO Alliance executive director and CEO who discussed credential recovery and the role of digital identity credentials.Derek HansonYubico field CTO who described the help desk's role in enterprise security controls at the FIDO Alliance's Authenticate conference.Jerrod ChongYubico CEO who discussed YubiID's purpose, integrations, planned availability, and the post-quantum YubiKey beta.
Vendors
1KosmosBeyond Identity already connects Nametag's identity checks to passkey enrollment and recovery, while 1Kosmos combines identity verification with passwordless authentication.Beyond Identityplanned YubiID integration partners—also sell workforce verification and recovery capabilities. Beyond Identity already connects Nametag's identity checks to passkey enrollment and recovery, while 1Kosmos combinesCLEARcan also use their own verification process or rely on other providers. Planned integrations with Clear, Nametag, and HYPR will allow organizations to combine providers whose coverage differs by region.HYPRtheir own verification process or rely on other providers. Planned integrations with Clear, Nametag, and HYPR will allow organizations to combine providers whose coverage differs by region.Microsoftconference in San Francisco this week, the service integrates with major identity providers, including Microsoft Entra, Okta, and Ping, and supports enrolling credentials on YubiKeys and mobile phones. This extendsNametagcan also use their own verification process or rely on other providers. Planned integrations with Clear, Nametag, and HYPR will allow organizations to combine providers whose coverage differs by region.OktaSan Francisco this week, the service integrates with major identity providers, including Microsoft Entra, Okta, and Ping, and supports enrolling credentials on YubiKeys and mobile phones. This extends Yubico's reachPingthis week, the service integrates with major identity providers, including Microsoft Entra, Okta, and Ping, and supports enrolling credentials on YubiKeys and mobile phones. This extends Yubico's reach toYubicoPhishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap
Products
Microsoft Entrain San Francisco this week, the service integrates with major identity providers, including Microsoft Entra, Okta, and Ping, and supports enrolling credentials on YubiKeys and mobile phones. This extendsYubiIDThe new YubiID service bridges identity verification with credential enrollment and recovery across existing identity platforms, closing a phishing-resistant authentication gap. Plus: post-quantum YubiKey beta.YubikeyThe new YubiID service bridges identity verification with credential enrollment and recovery across existing identity platforms, closing a phishing-resistant authentication gap. Plus: post-quantum YubiKey beta.
Industries
Consultingwith large, distributed or seasonal workforces, including transportation, retail, healthcare, consulting, and global services companies.Global servicesdistributed or seasonal workforces, including transportation, retail, healthcare, consulting, and global services companies.Healthcareamong organizations with large, distributed or seasonal workforces, including transportation, retail, healthcare, consulting, and global services companies.Retailstrongest among organizations with large, distributed or seasonal workforces, including transportation, retail, healthcare, consulting, and global services companies.TransportationInterest is strongest among organizations with large, distributed or seasonal workforces, including transportation, retail, healthcare, consulting, and global services companies.