Yubico Authenticator

Overview

Yubico Authenticator is a companion app for generating two-step verification codes for online accounts, with credentials kept on a YubiKey rather than in the app. It is best suited to people who already carry a YubiKey and want its codes on both phone and computer. Its hardware-centered approach favors credentials that stay with a physical key over cloud syncing, but makes that key essential.

Key features

OATH codes on a physical key

The app generates and displays TOTP and HOTP codes for services that accept standard authenticator codes, including Google Authenticator-compatible services; Yubico cites Azure MFA TOTP for Office 365 as an example. Account setup uses the QR code supplied by the service. Credentials reside in the YubiKey secure element, which Yubico says prevents them from being extracted. That is a clear fit for people who want credentials tied to hardware, but there is no encrypted backup or multi-device sync to fall back on if the key is unavailable.

Yubico says the same codes can be used in its mobile and desktop apps because the credentials travel with the portable key. This gives cross-device access without account-based syncing, but the desktop app requires a YubiKey to generate and display OATH credentials.

Mobile access and key management

On NFC-enabled phones, the app supports tap-and-go authentication; credentials can also be added to a YubiKey by touch or NFC tap. Yubico says Face ID or Touch ID can unlock the key. The app also manages a YubiKey’s FIDO PIN and can perform a factory reset. These functions make it useful alongside the code generator for managing a key, though it does not provide push approvals or team administration.

Pricing

Yubico Authenticator is free and open-source software, with no free trial because the app itself costs nothing. The free plan requires a YubiKey to store credentials and generate OATH codes. That makes it an inexpensive software choice for existing key owners, but not a standalone authenticator for someone who wants codes without dedicated hardware. The listed paid-from price of 29 one-time applies to YubiKey hardware, not a paid app tier.

Platforms

The app supports Windows, macOS, Linux, iOS/iPadOS and Android. Mobile NFC features require an NFC-enabled device. The portable key is what carries credentials between these apps; there is no multi-device sync service.

Who it's for

Choose Yubico Authenticator if you already use a YubiKey, want TOTP or HOTP codes stored on its secure element, and value using those credentials across desktop and mobile without cloud syncing. It is a poor fit if you need push approvals, team controls, encrypted backup, or an authenticator that works independently of a physical key.

Pros and cons

Pros: Credentials are held in the YubiKey secure element, which Yubico says makes them non-extractable; the same key can serve the desktop and mobile apps.

Pros: It is free, supports common TOTP and HOTP codes, and offers NFC access and YubiKey management features.

Cons: A YubiKey is required to store credentials and generate OATH codes, including in the desktop app.

Cons: There is no encrypted backup, multi-device sync, push approval or team administration.

Alternatives

For a dedicated hardware key with a stated one-time price and HOTP/TOTP support, consider the FEITIAN ePass FIDO-NFC Security Key, listed at $35, paid once. The Token2 PIN+ Release3.3 is another paid hardware option, listed at $24.70, paid once, with FIDO2.1/WebAuthn, U2F, PIV, OpenPGP and TOTP/HOTP support.

The Token2 T2F2-NFC-Slim is a paid alternative. The YubiKey 5 Series is a paid alternative with several listed one-time key options. For paid mobile authentication, consider SafeNet MobilePASS+. HID Approve is a paid consumer and workforce authentication option with mobile app or SDK deployment. FEITIAN Mobile Authenticator has quotation-based pricing and customizable UI, functions and related service. CipherTrust Secrets Management is a self-hosted or web option with a 90-day free trial.

Browse more choices in Authenticator apps and Security Keys.

Verdict

Yubico Authenticator is a strong choice for YubiKey owners who want TOTP and HOTP credentials bound to hardware and usable across phone and computer. The key is also the decisive trade-off: look elsewhere if you need backup, syncing, team administration or codes without carrying a YubiKey.