FIDO security keys
A FIDO security key is a hardware authenticator that uses origin-bound public-key credentials. It can provide phishing-resistant authentication without giving the online service a reusable shared secret.
The key does not transmit one global identifier to every service. Registration creates a credential for the relying party, and authentication proves possession of the matching private key. The browser and authenticator bind the operation to the intended origin, which is the main protection against credential-phishing sites.
What the product changes
Security keys are most useful for accounts where phishing or account takeover would have high consequences: primary email, password management, cloud administration, source or client communications, and staff administrator accounts.
They do not protect an already unlocked session, a compromised endpoint, unsafe recovery channels, or a service that does not support the relevant authentication method. The complete account-recovery design matters as much as the key.
Deployment pattern
A practical rollout uses at least two compatible authenticators:
- Register the primary and spare key while a known-good session is available.
- Set and record any required authenticator PIN locally.
- Store the spare separately from the daily key.
- Review which weaker recovery methods remain enabled.
- Test sign-in and recovery before changing the account baseline.
- Record service compatibility without recording the customer’s credentials or recovery codes.
For a team, the useful product is an enrollment and recovery process, not merely resale of identical hardware. Inventory provenance, replacement, offboarding, and administrator break-glass access need explicit ownership.
Catalog role
Privacy gear catalog treats security keys as one of the strongest products in the physical assortment. Privacy gear webshop can add value through compatible pairs, clear Swedish and English setup material, and small-team deployment support. Swedish and EU privacy suppliers records the current Yubico partner path.