Yubico has unveiled YubiID, a subscription service entering limited early access that links identity verification with credential enrollment and account recovery, at its first YubiNation user conference in San Francisco.
The service integrates with identity providers including Microsoft Entra, Okta and Ping and can enroll credentials on YubiKeys or mobile phones, extending Yubico’s reach to organizations that have decided against deploying hardware keys. It includes a baseline identity verification capability, but customers can use their own process or other providers. Planned integrations with Clear, Nametag and HYPR will let organizations combine providers whose coverage differs by region.
CEO Jerrod Chong said the problem used to be an afterthought: confirming that a key reaches the right person and that someone reporting it lost is that person. Field CTO Derek Hanson said last month that the help desk “has moved from an operational control to an actual security control in most enterprises.”
YubiID coordinates verification and enrollment rather than replacing the identity platforms companies already run. “We’re not being an IDP,” Chong said. “I think that there are more opportunities for collaboration than competition.” A company onboarding 10,000 temporary workers ahead of the holidays could use both administrator-assisted, in-person enrollment and remote enrollment and verification. Interest has been strongest among organizations with large, distributed or seasonal workforces in transportation, retail, healthcare, consulting and global services.
Yubico is working with unnamed large organizations as design partners and hopes to make YubiID generally available in the first half of 2027. Federal agencies could eventually use employees’ PIV credentials to establish their identities when enrolling FIDO credentials, though those workflows are not fully available at launch. Agent authorization is also outside the launch, although Yubico ultimately wants to provide verifiable proof that a person authorized a specific AI agent action.
The company also announced a public beta of a post-quantum-ready YubiKey supporting NIST-standardized algorithms. It has tested early implementations with Chrome and Firefox, has sent early keys to federal labs and hyperscalers, and expects to submit the key for FIPS validation within about a year. The beta devices cannot receive firmware upgrades, so organizations would have to replace them if different algorithms are required.
Separately, Yubico’s board has adopted 2027–2031 financial targets of 15 to 20 percent average annual net sales growth and an EBIT margin moving toward 20 percent by 2031. The company will present its strategy at a Capital Markets Day in Stockholm on November 19.
Sources: Dark Reading, SC Media, Yubico
–
By the ID Tech Editorial Team
