Show / Hide Table of Contents

The FIDO U2F PIN

Both the FIDO U2F and FIDO2 standards specify that a device have a "test of user presence" in order to perform registration and authentication operations. This test is described as follows. "The user touches a button (or sensor of some kind) to 'activate' the U2F device".

With the YubiKey, there is the option to specify a PIN in order to use the U2F application as well as touch. However, this option is available only for YubiKey 4 FIPS series. If you try to set a PIN for the U2F application on a non-FIPS version 4 YubiKey, or a YubiKey 5 (FIPS or non-FIPS) series, or a YubiKey Security Key series, it will not work.

Note that with a version 5 FIPS series YubiKey, it is possible to set a PIN on the FIDO2 application. Version 4 series YubiKeys do not have the FIDO2 application, and it is not possible to set a FIDO2 PIN on a non-FIPS version 5 series YubiKey.

YubiKey U2F Available FIDO2 Available U2F PIN FIDO2 PIN
v 4 yes no no -
v 4 FIPS yes no yes -
v 5 yes yes no no
v 5 FIPS yes yes no yes
SKY yes yes no no

To learn more about the U2F PIN, see the article on FIDO U2F and FIPS.

  • Improve this Doc
In this article
Back to top Generated by DocFX