YubiKey 5 Series: Which Model Do You Need?
Six similarly-named YubiKey SKUs, no obvious pick. Three questions narrow it to one model, with real current pricing and the Bio Series distinction most comparison articles get wrong.

You're ready to buy, convinced by the phishing-resistance case, and Yubico's store page shows six keys with almost identical names — 5 NFC, 5C NFC, 5 Nano, 5C, 5C Nano, 5Ci — and no obvious "buy this one" button. Order the wrong connector and it doesn't fit your laptop. Here's how to actually pick.
TL;DR
- Three questions narrow six SKUs to one: does your laptop have USB-A or USB-C? Do you need to tap your phone (NFC)? Do you want it to live permanently in the port (Nano)?
- The YubiKey 5C NFC (~€69) covers USB-C laptops and NFC phones at once — the answer for most people buying today.
- The YubiKey Bio Series is a separate product line, not a 5-Series option — no NFC, and its more capable edition is subscription-only.
- Nano models trade portability for permanence: no keychain hole, meant to stay plugged in.
- Pricing below is pulled directly from Yubico's own store, not a stale reprint.
KEY-STAT: 6 — the number of distinct YubiKey 5 Series SKUs Yubico currently sells, before you even get to the separate Bio Series. Three yes/no questions is all it takes to pick the right one.
The three questions that pick your key
Skip the spec sheet and answer these in order — by the third question, there's usually exactly one SKU left that fits.
- Does your laptop or desktop have USB-A or USB-C? This alone eliminates half the lineup.
- Do you need to tap your phone to log in (Android or iPhone NFC), not just plug into a computer? If yes, you need an NFC model.
- Do you want the key to live permanently in the port — a home server, a desktop that never travels — or does it need to move between devices on a keychain? Permanent means Nano; portable means standard size.
YubiKey 5 Series lineup, with real pricing
Pricing below is pulled directly from Yubico's own comparison page, current as of this writing — not a reprint of an old spec sheet.
| Model | Connector | NFC | Form factor | Price (incl. VAT) |
|---|---|---|---|---|
| YubiKey 5 NFC | USB-A | Yes | Standard, keychain hole | €69.02 |
| YubiKey 5C NFC | USB-C | Yes | Standard, keychain hole | €69.02 |
| YubiKey 5C | USB-C | No | Standard, keychain hole | €77.35 |
| YubiKey 5 Nano | USB-A | No | Nano, stays in port | €80.92 |
| YubiKey 5C Nano | USB-C | No | Nano, stays in port | €80.92 |
| YubiKey 5Ci | Lightning | No | Dual-interface | €101.15 |
The YubiKey 5C NFC is Yubico's own "most popular" pick, and for good reason: it's the only model on the list that covers a modern USB-C laptop and NFC tap-to-phone at the same price as the USB-A-only 5 NFC. Unless you specifically need an older USB-A port or a permanently-seated Nano, it's the default answer.
Tip
If you're not sure whether your laptop has USB-A or USB-C, look at the port shape: USB-A is the wider rectangular port that's been standard since the 2000s; USB-C is the smaller, oval, reversible port on almost every laptop made since roughly 2016.
The Bio Series is a different product line — here's the catch
Several comparison articles lump "YubiKey Bio" in as a seventh 5-Series option. It isn't — Yubico sells it as a separate series with a real functional gap: no NFC support at all, on either edition.
The Bio Series replaces the tap-and-PIN flow with a fingerprint sensor, in two editions:
- FIDO Edition — USB-A or USB-C, fingerprint or PIN, FIDO2/WebAuthn only, sold at retail like the 5 Series.
- Multi-protocol Edition — adds Smart Card/PIV support (Windows biometric desktop login), but is only available through Yubico's subscription service (YubiKey as a Service), not as a one-time retail purchase.
Warning
If you want Windows Hello-style fingerprint login for a domain-joined machine, check whether you actually need the Multi-protocol Edition before buying — its subscription-only distribution is easy to miss until you're already at checkout on the FIDO Edition instead.
Matching the key to what you actually own
- Modern laptop (USB-C) + phone 2FA → YubiKey 5C NFC. Covers both without buying two keys.
- Older laptop (USB-A) + phone 2FA → YubiKey 5 NFC. Same price, different connector.
- USB-C laptop only, no phone tapping needed → the plain YubiKey 5C exists for this case, but at €77.35 it's actually more expensive than the NFC version at €69.02 — so unless you have a specific reason to avoid NFC, the 5C NFC is both cheaper and more capable.
- Home server or desktop that never travels → 5 Nano or 5C Nano, matched to the port, left in permanently.
- iPhone with Lightning, no USB-C → YubiKey 5Ci, the only model with a Lightning connector.
- Windows biometric desktop login → Bio Series Multi-protocol Edition (confirm subscription terms first).
What I actually run, and why
My daily-driver setup for SSH and admin logins is a 5C NFC — USB-C fits the laptop, and the same key taps against my phone for GitHub and Google 2FA when I'm not at a computer at all. One key, one purchase, covers both cases instead of needing a USB-only key for the desk and a separate NFC key for mobile. The extra few euros over the non-NFC 5C would have been a mistake in hindsight, since the phone-tap use case came up within the first week.
A hardware key is one piece of a broader setup, not a replacement for the rest of it. It protects the accounts you log into, but it doesn't touch the network those logins travel over — that's a separate job covered in our home network security guide, which ranks the router, firmware, and Wi-Fi basics by effort versus impact the same way this article ranks the key models.
Frequently asked questions
What is the difference between YubiKey 5 and 5C?
"5" models use the older USB-A connector; "5C" models use USB-C. Beyond the connector, the security features and protocol support are identical — the choice comes down entirely to which port your devices have.
Do I need NFC on a YubiKey?
Only if you want to tap the key against a phone to log in, instead of plugging it into a USB port. If all your 2FA happens on a computer, a non-NFC model works fine and can be slightly cheaper.
Is YubiKey Bio better than YubiKey 5?
Not strictly better — it trades NFC support for fingerprint authentication, and its more capable edition is subscription-only rather than a one-time purchase. Most people are better served by the standard 5 Series unless biometric login on Windows is a specific requirement.
Which YubiKey works with an iPhone?
Any NFC model (5 NFC, 5C NFC) works with iPhones that support NFC tapping, which covers most iPhones from the last several years. The 5Ci with a Lightning connector is the option for direct plug-in rather than tapping.
Can I use a YubiKey Nano on a keychain?
No — the Nano form factor is deliberately small with no keychain hole, designed to stay plugged into a port permanently rather than travel with you. For a portable, keychain-friendly key, choose a standard-size model instead.
More from Self-Hosting & Privacy

Most home network security checklists treat every step as equally urgent. This hub ranks six already-tested guides — router setup, firmware, WPA3, IoT/VLAN isolation, firewalls, router selection — by effort vs. impact, with a realistic 30-day plan.

A YubiKey is a small hardware device that proves who you are with a single touch. Here's how its phishing resistance actually works, how it compares to authenticator apps and passkeys, and which accounts are worth the €25–€70.

You have the key, now what? A walkthrough for registering GitHub and Google 2FA plus a real FIDO2 SSH login (ssh-keygen -t ed25519-sk), in the order that keeps you from locking yourself out.
Stay in the loop
Get the latest articles delivered to your inbox. No spam, unsubscribe anytime.
Router Security Setup Checklist for 2026
A real router admin panel, walked through step by step: default credentials, firmware, WPA3, WPS, UPnP, remote access, and VLAN segmentation for IoT — with the reasoning for each change.
Continue Reading