Yubico Extends Passkeys Beyond Trusted Authentication to Verified Authorization with Launch of YubiKey 5.8

Yubico (NASDAQ STOCKHOLM: YUBICO), the pioneer of phishing-resistant authentication and creator of the original passkey, the YubiKey, today announced the general availability of its YubiKey 5.8. The launch marks an expansion of the role of the passkey from secure authentication to include verifiable, hardware-backed authorization. The new firmware delivers a foundation for secure enterprise workflows across identity wallets, document signing, and AI-driven approvals. It also gives developers the critical capabilities needed to test, design, and deploy these next-generation security features early.

As generative and agentic AI mature to drive rapid, automated cyberattacks, traditional multi-factor authentication (MFA) is failing to keep pace. Security leaders now face a global challenge. They must secure not just who logs into a system, but exactly what actions a user or autonomous AI agent can perform. The YubiKey has long delivered industry-leading defense against phishing. YubiKey 5.8 goes further, addressing the needs of complex, multi-environment enterprises. It extends trusted logins into a secure, hardware-backed foundation for verifiable digital actions in the age of AI.

“YubiKey 5.8 represents one of the most significant architectural updates to the modern authentication ecosystem by expanding phishing resistance into the workflows themselves,” said Albert Biketi, chief product and technology officer at Yubico. “In an era where AI agents execute high-consequence business workflows, organizations must enable dynamic verification of human intent. YubiKey 5.8 bridges that gap, bringing hardware-backed phishing resistance directly into digital signatures, enterprise credential management, and human-in-the-loop validation workflows – without requiring costly custom cryptographic rollouts.”

Simplifying the Usability and Scalability of Hardware-Backed Passkeys Through Open Standards

The new firmware introduces support for the CTAP 2.3 standard while offering preview support for the emerging WebAuthn signing extension. Developers can now use familiar standards and APIs to build secure, privacy-preserving workflows. This removes the need for expensive backend key management systems or custom cryptographic infrastructure. As a result, this significantly lowers the barrier to building trusted digital workflows. Developers can integrate high-assurance signatures into web applications, digital wallets, and AI-driven workflow approval systems with greater speed and less complexity.

YubiKey 5.8 delivers substantial technical upgrades built directly for developers working across the modern enterprise identity control plane:

• Support for cutting-edge use cases: Enables hardware-backed digital signatures through standardized APIs. This opens the door to document signing, identity wallets, workflow approvals, and other high-assurance transactions.
• Better user experience and enterprise scale: Expanded Enterprise Attestation support to 16 Relying Party (RP) IDs on a single key. This lets a single YubiKey be uniquely identified down to an individual device across trusted development, testing, staging, and production environments. It works across multiple identity providers without compromising user privacy.
• Simplified developer integration: Introduces CTAP 2.3 support and preview support for the emerging WebAuthn signing extensions. This makes it easier for developers to integrate secure digital signatures using familiar standards.
• Emerging initiatives secured: Expands support for digital identity wallets and verifiable credentials with privacy-enabling algorithms. It also adds Secure Payment Confirmation (SPC) support for those developing hardware-backed payment use cases on the web.
• Streamlined user experience: Persistent PIN/UV auth tokens let apps enable frictionless credential discovery and selection. Users get more autofill capabilities and fewer PIN prompts.
• Operational simplicity and lower overhead: Introduces autofill-like credential discovery directly alongside software passkeys. This reduces user confusion, accelerates phishing-resistant passkey adoption, and minimizes IT helpdesk enrollment costs.

Industry Reaction and Availability

“The new signing capabilities of YubiKey 5.8 are a game changer for digital identity and credentials,” said Leif Johansson, executive director at SIROS Foundation.

“In the last decade, FIDO authentication has become the industry gold standard for phishing-resistant authentication. By adding signatures, a whole range of new applications become possible without introducing platform lock-in. At SIROS, we are working to integrate the new signing capabilities into a seamless framework for secure phishing-resistant digital identity credentials,” continued Johansson.

YubiKey 5.8 is shipping across all major YubiKey product lineups starting today. This benefits organizations actively working on the next generation of use cases. For those focused on hardware-backed signatures, digital wallet features, and AI-based workflows, YubiKey 5.8 accelerates strong security for these scenarios. Additionally, YubiKey 5.8 supports all of the capabilities of YubiKey 5.7.4 and expands the use of passkeys for enterprise use cases.

At this time, the YubiKey FIPS Series will remain on the newly validated FIPS 140-3 firmware 5.7.4 to maintain regulatory alignment. The YubiKey CCN Series will also remain on 5.7.4 while it undergoes final re-certification.

For more details on YubiKey 5.8, watch the launch video or read the Yubico blog post.

About Yubico

Yubico (Nasdaq Stockholm: YUBICO) is a global cybersecurity pioneer dedicated to making the digital world safer for everyone. As the creator of the YubiKey, Yubico set the gold standard for phishing-resistant, hardware-backed authentication. In doing so, the company virtually eliminated account takeovers while keeping secure login effortless.

A leader in authentication since 2007, Yubico co-created global standards like FIDO2, WebAuthn, and FIDO U2F. The company also introduced the foundational technology behind the modern passkey. Today, the company’s passkey solutions secure businesses, governments, and individuals in more than 160 countries. In turn, they safeguard the entire digital identity lifecycle from onboarding to recovery.

Trusted by the world’s most security-conscious brands, AI frontiers, and institutions, YubiKeys deliver fast, friction-free, passwordless access. This works across hundreds of enterprise applications out of the box. True to its mission, Yubico also drives the Secure it Forward philanthropic initiative, donating YubiKeys to vulnerable communities and nonprofits globally.

Yubico’s global footprint includes headquarters in Stockholm, Sweden, Silicon Valley, California, and Singapore. Yubico is recognized as one of TIME’s 100 Most Influential Companies and Fast Company’s Most Innovative Companies. Learn more at www.yubico.com.

Stay Informed With Cyber News Live

Cyber threats are constantly evolving, and staying informed is critical to protecting your organization.
Follow Cyber News Live for the latest cybersecurity news, threat intelligence, expert analysis, and practical guidance to help strengthen your cyber defenses.