Yubico Authenticator

Overview

Yubico Authenticator is a two-step verification app for accounts that use standard authenticator codes. It is best suited to people who want credentials kept on a YubiKey and carried between phone and computer. Its hardware-centered approach is a clear fit for that preference, but less so for anyone who wants codes available without carrying a key.

It works with services compatible with other authenticator apps, including Google Authenticator; Yubico cites Azure MFA TOTP for Office 365 as an example. Yubico was founded in 2007 and is headquartered in Stockholm, Sweden.

Key features

OATH codes stored on a YubiKey

The app generates and displays TOTP and HOTP codes. Users add credentials by scanning the QR code provided by the service they want to protect. Credentials reside in the YubiKey secure element, which Yubico says means they cannot be extracted. That keeps the credential storage tied to physical hardware rather than an app account, a useful distinction for users who want that arrangement. It also makes the YubiKey essential: the free app requires one to store credentials and generate OATH codes.

Yubico says the same codes are available in its desktop and mobile apps because credentials are held on the portable key. This offers continuity between devices without multi-device sync, but the key must be on hand. The app does not provide encrypted backup or push approvals, so users who need either capability should consider another option.

Mobile use and key management

On NFC-enabled devices, the mobile app supports tap-and-go authentication; credentials can also be added to a YubiKey with a touch or NFC tap. Yubico says Face ID or Touch ID can unlock the key. Alongside code generation, the app can manage a YubiKey’s FIDO PIN or perform a factory reset, making it useful as a companion for key management as well as codes.

The desktop constraint is important: a YubiKey is required to generate and display OATH codes in the desktop app. The app supports Windows, macOS, Linux, iOS/iPadOS and Android. Yubico provides a user guide in its product documentation.

Pricing

Yubico Authenticator — free. The plan is free and open source, with no free trial. It includes the app for generating and displaying OATH codes, but requires a YubiKey to store credentials and generate those codes. The hardware requirement is the practical cost of choosing this model; the app itself does not offer a no-key route for OATH code generation.

Platforms

Yubico Authenticator runs on Windows, macOS, Linux, iOS/iPadOS and Android. Mobile NFC support adds tap-and-go interaction on compatible devices, while desktop OATH code display still depends on a YubiKey.

Who it's for

This is a strong match for people who already use a YubiKey and want authenticator credentials to travel with it across mobile and desktop apps. It also suits users who prefer credentials held in a hardware key and want FIDO PIN or reset controls alongside OATH codes. Look elsewhere if you need cloud-style sync, encrypted backup, push approvals, or desktop codes without the key.

Pros and cons

• Credentials stay on the YubiKey: Yubico says they cannot be extracted from its secure element, appealing to people who want hardware-held credentials.
• Codes travel between mobile and desktop: the portable key makes the same credentials usable in both app types without multi-device sync.
• Broad operating-system coverage: the app supports major desktop and mobile systems, with NFC interaction on supported mobile devices.
• A YubiKey is mandatory for OATH codes: this limits use for people who want an authenticator app that stands alone.
• No encrypted backup, sync or push approvals: those omissions matter to users who want recovery options or approval prompts rather than code entry.

Alternatives

Ente Auth is worth considering if exporting and importing data is important; Ente says Auth is fully open source and offers a free forever plan.

Proton Authenticator is another free, open-source option if inspectable code is a priority; Proton says anyone can inspect it.

Zoho OneAuth is a free option for Zoho work accounts and personal online accounts, with time-based OTP authentication and backup and recovery.

Bitwarden may suit readers looking for basic password management alongside authentication: its free plan includes unlimited devices and passwords.

Duo Mobile is an alternative for small teams considering Duo’s free plan, which is billed monthly and covers 10 users.

HYPR Authenticate is an alternative for readers considering a paid access product; its Identity Assurance Access plan is $3 a month.

SAASPASS Authenticator offers a free personal-use plan with a mobile app.

Google Authenticator is another free option for Android and iOS.

Browse more options in our Authenticator apps and Security Keys lists.

Verdict

Choose Yubico Authenticator if you want OATH credentials held on a YubiKey and carried between mobile and desktop apps. That hardware-based portability is its main reason to choose it; the same dependence is also its chief drawback, so readers who need sync, backup, push approvals or key-free desktop codes should look elsewhere.