How to add YubiKeys to Apple ID: A step-by-step guide

With Apple’s launch of support for security keys as a part of their iOS 16.3 update, users can now register their YubiKeys to their iCloud account. By taking this simple step, users can significantly increase their security – even if their iCloud account password is stolen. 

Security keys are phishing-resistant because they require proof of possession and the presence of the user to log in or gain access. They also deliver a seamless experience, letting users log in with a single tap or touch on the security key, and are both crush-proof and water-resistant. Beyond its convenience factor, YubiKeys are trusted devices – meaning you don’t need to use the YubiKey every time you log in. Once an app or service is verified, it will stay verified.

The first step to phishing-resistance is adding your YubiKey to your iCloud account. Below are the necessary steps needed to do so, as well as a video highlighting each step. 

For more detailed instructions on adding YubiKeys to Apple ID, visit our support center.

Adding YubiKeys to your iCloud account 

To ensure you have a backup, you need a minimum of two YubiKeys to get started (you can add up to 6 security keys). A full list of compatible YubiKeys with iCloud is found at the top of the page here, but most YubiKeys will be able to be paired. Apple recommends the YubiKey 5 Series – including the 5C NFC or 5Ci (featuring a dual connector with support for USB-C and Lightning) – but you can discover what YubiKey is right for you by taking our quiz.

To get started, first verify you have the following prerequisites: 

  • A minimum of two YubiKeys
  • iOS/iPadOS 16.3 or above
  • Two-factor authentication enabled on your Apple ID
  • MacOS Ventura 13.2 or above
  • A modern web browser such as Safari or Chrome

Once the above items are confirmed, follow the below steps to add YubiKeys to iPhone, iPad or Mac:

On iPhone or iPad:

  1. Open the Settings app.
  2. Tap your name, then tap Password & Security.
  3. Tap Add Security Keys, then follow the onscreen instructions to add your keys.
    1. At the prompt, plug in or tap your Security Key to the iPhone. Note that plugging in your YubiKey requires you to also physically touch the key.
  4. Review the devices associated with your Apple ID, then choose to
    1. Stay signed in to all active devices.
    2. Select devices that you don’t want to continue to have access to your account and sign out of them.

On Mac:

  1. From the Apple menu, choose System Settings, then click your name.
  2. Click Password & Security.
  3. Next to Security Keys, click Add, then follow the onscreen instructions to add your keys.
    1. At the prompt, plug in or tap your Security Key to the iPhone. Note that plugging in your YubiKey requires you to also physically touch the key.
  4. Review the devices associated with your Apple ID, then choose to
    1. Stay signed in to all devices.
    2. Select devices that you don’t want to continue to have access to your account and sign out of them.

Once you have set up your YubiKey with your iCloud account, you will be required to use a security key to log in from untrusted devices. Read Apple’s Security Key support article to learn more about the implementation.

Check out the video below to see how the process outlined previously works, and get on the path to phishing-resistance! 

Talk to our teamTalk to our team

Share this article:


  • FIPS certified vs. FIPS compliant: What’s the real difference?“Is your MFA solution FIPS compliant, or is it certified?”  This is a question we hear a lot, and for good reason. In industries where security and compliance are critical (especially in government contracts), understanding the difference between FIPS certified and FIPS compliant isn’t just semantics – it can mean the difference between meeting requirements […]Read moreFIPSNIST
  • 2025 Global State of Authentication survey: A world of difference in cybersecurity habitsIn a world that’s more connected than ever, the landscape of cybersecurity threats is constantly evolving. Bad actors, now supercharged with artificial intelligence (AI), are becoming increasingly adept at exploiting human error through sophisticated phishing and social engineering attacks. This makes robust cybersecurity a universal issue, impacting everyone from individuals to the largest global enterprises. […]Read moreGlobal State of Authenticationsurvey
  • Making digital security a right: Inside Yubico’s Secure it Forward programTechnology can be a great equalizer — but only if the strongest protection is within reach. Since 2022, Yubico has donated more than 65,000 YubiKeys to hundreds of organizations worldwide — a retail value of over $3.3 million. Each key helps strengthen digital protection for those doing vital work in their communities. This isn’t just […]Read more
  • Unlocking trust in enterprise security: Yubico and Okta empowering businesses togetherCollaboration with ecosystem partners is critical for providing our customers with the best cybersecurity solutions. Together, Yubico and Okta have achieved remarkable milestones over the years, including launching innovative solutions and aligning our go-to-market efforts – all aimed at delivering the most impactful cybersecurity solutions and user experience for our customers and partners. At the heart […]Read moreOktaOktane