Get started with YubiKey Bio Series (2024)

Have your key ready

Have your key ready to plug into your computer, preferably the same way you will plug it in later when you authenticate: i.e., either with or without an adapter.

Get your trusted device ready

Use a device that is not public and has an up to date operating system, this can be a computer running either Windows 10 (1903 or later) / Windows 11, or any of the following with the Chrome browser 93 or later: macOS (Catalina or later), Chrome OS 93 or later, Ubuntu 18.04 or later.

Do you have a spare key?

Yubico recommends that you add a backup YubiKey to any account to which you have added your primary YubiKey. This can be a YubiKey Bio Series key, or alternatively any YubiKey 5 Series or any Security Key by Yubico. Read more about backup (spare) YubiKeyhere.

• Three short flashes of amber LED, the LED closest to the USB connector: The fingerprint was not successfully matched to an enrolled fingerprint template.
• Constant slow flashing of amber LED: The YubiKey Bio is either in biometric blocked state, see this question, alternatively no fingerprints have been enrolled on the YubiKey Bio. To enroll fingerprints see this section
• Rapidly flashing green LED, the LED closest to the fingerprint sensor: Biometric touch (fingerprint) required, touch the sensor pad and bezel ring with a finger which print you have enrolled. The key flashes about four (4) times asecond. For comparison, this is twice as fast as on a YubiKey 5 Series device requesting touch
• Slowly flashing green LED: No biometric touch required, touch the sensor pad and bezel ring with any finger. For comparison, this is the same frequency as on a YubiKey 5 Series, flashing about twice a second

You can enroll a total of 5 fingerprints. To manage existing, and enroll additional, fingerprints on:

• Windows 10 and Windows 11
  • navigate to Setting/Accounts/Sign-in options/Security Key/Security Key Fingerprint, select Fingerprints and follow the instructions or;
  • seethis part of the enrollment video
• Chrome or a Chromium-based browser on macOS, Linux, and Chrome OS:
  • navigate to chrome://settings/securityKeys , select Fingerprints and follow the instructions or;
  • seethis part of the enrollment video
• Desktop Yubico Authenticator
  • navigate to Configuration/Fingerprints, select Add and follow the instructions or;
  • seethis part of the enrollment video

After 3 unsuccessful attempts to authenticate using biometrics your YubiKey Bio will cease to prompt for the fingerprint and will fall back to PIN and regular touch, the primary authentication mechanism. The blocked biometrics state is indicated by a constant slow flashing of the amber LED, the one closer to the USB-contact.

To unblock biometrics, do the following:

• Enter the PIN for your security key.
• When the green LED flashes, touch the bezel ring on your key.

Note that if you are not in the biometrics blocked state, the browser will ask you to authenticate using biometrics.

Fingerprint authentication could stop working for a number of reasons:

• Wipe the sensor clean with a clean cloth and ensure your hands are moisturized. To learn more about how to clean the sensorread more here.
• If the key’s amber LED is flashing constantly, see the section above on “How do I unblock biometrics on my key?” for help
• If the key is still flashing amber, see sectionFingerprint enrollment, to find the correct menu to manage fingerprints and make sure you have fingerprints enrolled.
• If none of the above solutions resolve your issue,contact the Support team.

Reset is a security feature for wiping all your information off your key. This is recommended when you no longer plan to use the key or need to return it to whomever issued it to you. When the key is reset the following happens:

• All FIDO2 credentials (both discoverable and non-discoverable) are removed and accesswith this keyto accounts or services to which it has been added is no longer available.
• Accesswith this keyto the U2F sites where it was registered is no longer available.
• The PIN is removed.
• All stored fingerprints are removed.

• Yubico always recommends adding two keys to each of your online services and accounts; one primary and one secondary as backup in case the primary is lost. Adding a second key is done exactly the same way as adding your primary key. Yubico recommends that you add it at the same time as you add your primary key.
• If a key is lost, remove it from the associated account(s) and add a new YubiKey to the associated account(s) to ensure you have at least one backup key associated with the account.
• Your backup key can be any YubiKey with the FIDO2/WebAuthn or FIDO U2F protocol enabled, therefore it can be either a key from the YubiKey 5 Series, a Security Key Seriesby Yubico or a YubiKey Bio Series key. Note that because the PIN, and in the case of a YubiKey Bio Series key the fingerprint(s), are associated with the individual keys, it is necessary to set a PIN or enroll fingerprints on each backup security key individually.

For more information and guidance on backup keys, please seehttps://www.yubico.com/spare/

See which platforms are supported in the sectionGet your trusted device ready.

Mobile operating systems such as iOS and Android do not support CTAP2.1, the standard on which YubiKey Bio bases its implementation.