Yubico

YubiCloud – one touch authentication service

The YubiCloud is a free cloud based YubiKey One-Time Password (OTP) validation service, for easy integration of strong two-factor authentication with your web site or online service. Successfully verified by hundreds of thousands of daily users, YubiCloud helps enterprises and online services around the world to obtain compliance and reduce fraud risk at unmatched simplicity and low cost.
 

Redundant and secure

Five YubiCloud OTP validation servers are located around the world, distributed and synchronized to ensure that there is no single point of failure. Since implementation of YubiCloud 2.0 early 2010, there has been no validation service downtime. The validation servers are equipped with YubiHSM Hardware Security Modules, protecting YubiKey encryption
keys from an Internet attack or from being accessed by server staff.
 

Quick and easy integration

Integration is normally done in 20-40 minutes, using one of the Web/Client APIs. Most online services keep existing username and password login (validated by the online service) and add an additional YubiKey OTP login field (validated by the YubiCloud).
 

Users order direct from Yubico

Yubikeys from the Yubico store comes ready to use with the YubiCloud, requiring no programming of the keys. Online services who want to avoid the cost and hassle of keeping stock and shipping hardware, point their users to order directly from Yubico web store. Yubico ship to all countries with standard delivery in less than a week.
 

Auto-deployment of YubiKeys

Online services who want to deploy their own YubiKeys, the product can be shipped in a standard envelope and with no binding of serial numbers to the user. At delivery, the user will bind his YubiKey to a user account and can start using the YubiKey immediately.
 

Zero cost and support for the service provider

Yubico provides a general user instructions page for YubiKey users. However, to eliminate support, we recommend you to make a custom YubiKey page on your web site, including user instructions, FAQ and Technical Forum. Lost YubiKeys can be easily disabled any time at Yubico online revoke service. Our online affiliate program is available for online services who want to promote the YubiKey via your website, emails or newsletters. It’s free and easy to implement and will automatically give you 15% commission in referred YubiKey web sales.
 

Sell your solution on the Yubico web store

Well implemented services supporting the YubiCloud, can apply to be listed on the Yubico web store bundled with YubiKeys. In this set-up Yubico charges for the solution and will provide the agreed license fees to the partner, including full customer contact details.
 

One YubiKey – multiple services

Your users can re-use their YubiKey on a range of public online services supporting YubiCloud, including consumer password managers, identity providers, email providers and ISPs.

» White Paper: Read more about the Yubico security infrastructure
» Best practice implementations are summarized in the Design Guide.
» Contact us to learn more how to be successful with YubiCloud