How YubiKeys are made: Security at scale

The first YubiKey was manufactured in Sweden in 2008. A few years later, part of our team moved from Stockholm to California, and we expanded our production capabilities to this part to the US West coast. It was a conscious choice to manufacture our products in the two democratic countries that were close to our innovation teams and main customers. To further safeguard the security of our products, we have the last decade continued to make investments across the entire supply chain, summarized in more details in this page on Yubico secure manufacturing

The Yubico innovation team has been internationally recognized for creating game changing product designs and security protocols in our industry. What many may not know is that we also invented new methods for manufacturing USB keys in a monoblock form factor. A glimpse of how YubiKeys are made can be seen in this video from our main manufacturing plants in Sweden. 

Today, we are launching and ramping up volume production for our fourth USB-C device, the YubiKey 5C NFC. In 2016, before USB-C was commonly available on laptops on Android phones, we launched the first USB-C security key in keychain form factor. Two years later we introduced the YubiKey C Nano, which is probably the industry’s smallest USB-C authenticator ever made. And last year, we introduced the YubiKey 5Ci, the world’s first USB-C and Lightning dual-connector security key.

The YubiKey 5C NFC is a welcomed new member of the YubiKey family. After unexpected delays due to COVID-19, it’s finally here. Requested by our customers and meeting the core features and values that signifies a genuine YubiKey — quality, security, robustness, and usability in a minimalistic design. 

Talk to our teamTalk to our team

Share this article:


  • Platform independent digital identity for all Many are understandably concerned that the great invention called the Internet, initially created by researchers for sharing information, has become a major threat to democracy, security and trust. The majority of these challenges are caused by stolen, misused or fake identities. To mitigate these risks, some claim that we have to choose between security, usability […]Read moreDigital IdentityEUDIFounderStina Ehrensvard
  • Q&A with Yubico’s CEO: Our move to the main Nasdaq market in StockholmAs 2024 draws to a close, it’s the perfect time to reflect on the incredible journey we’ve had this year and how it has shaped where we stand today as a company. To mark this moment, I sat down with our CEO, Mattias Danielsson, to look back on the milestones and achievements of 2024—culminating in […]Read moreCEOMattias Danielsson
  • Exploring DORA: A look at the next major EU mandateFinancial institutions have historically managed operational risk using capital allocation, but under EU Regulation 2022/2554 – also known as the Digital Operational Resilience Act (DORA) – the financial sector and associated entities in the European Economic Area (EEA) must also soon follow new rules. These new rules focus on the protection, detection, containment, and the […]Read moreDORAEU
  • Securing critical infrastructure from modern cyber threats with phishing-resistant authenticationAcross the globe, 2024 has seen a whirlwind of change. With ongoing wars, recent political change-ups and more, growth in data breaches targeting critical infrastructure continue to be on the rise. Critical infrastructure is integral to our everyday life – from the energy and natural resources powering our hospitals and providing clean drinking water, telco […]Read moreCISAcritical infrastructurezero trust