Yubico Expands FIPS 140-2 Product Line with YubiHSM 2 FIPS, the World’s Smallest FIPS Validated Hardware Security Module

Complementary to the company’s new YubiKey 5 FIPS Series, YubiHSM 2 FIPS enables highly-regulated organizations to achieve a holistic security posture

PALO ALTO, CA and STOCKHOLM, SWEDEN – May 4, 2021 –  Yubico, the leading provider of hardware authentication security keys, today announced its latest FIPS 140-2 product offering, and the first of its kind for the company: YubiHSM 2 FIPS. Today’s news comes alongside the YubiKey 5 FIPS Series launch, the company’s most recent security key line to receive FIPS 140-2 validation. 

The YubiHSM 2 launched in 2017, but this marks the first FIPS-validated version of the product. The YubiHSM 2 FIPS is certified at FIPS 140-2, Level 3. With the added availability of YubiHSM 2 FIPS, organizations in highly-regulated industries such as government, financial services, healthcare, and energy now have the opportunity to reap the same security benefits that many other YubiHSM users have. This includes advanced protection for certificate authority (CA) keys, database master keys, code signing, authentication/access tokens, manufacturing processes and component authenticity checks, IoT gateways or proxies, file encryption, cryptocurrency exchanges, and more. 

“The YubiHSM 2 FIPS is an exciting addition to our recently updated FIPS-validated product line,” said Suresh Thiru, Chief Product Officer, Yubico. “Our high-risk customers are now equipped with a full product suite that helps them not only achieve and maintain compliance, but also advance their security posture across the entire organization. From protecting servers to users, regardless of their location, Yubico is the partner who strives to do it all.” 

Primary benefits of the YubiHSM 2 FIPS include: 

  • Secure hardware protection for cryptographic keys — The YubiHSM 2 FIPS enables secure key storage and operations on tamper-resistant hardware, with audit logging. This prevents accidental copying and distribution of keys, and remote theft of cryptographic software keys. Extensive cryptographic capabilities include: hashing, key wrapping, asymmetric signing, decryption, attestation and more. 
  • Innovative design for flexible use and simple deployment — Traditional rack-mounted and card-based HSMs are not practical for many organizations due to their size and deployment complexity. The YubiHSM 2 FIPS offers a portable ‘nano’ form factor that allows fast and flexible deployment across diverse environments. It fits easily into a USB-A slot, lying almost flush to remain concealed. 
  • Low-cost, high security ROI — The YubiHSM 2 FIPS delivers government-grade high cryptographic security and operations at a price point that is up to 90% cheaper than traditional HSMs. Additionally, low-power usage reduces business energy consumption. 

Along with the rest of Yubico’s FIPS product lineup, YubiHSM 2 FIPS is manufactured using stringent processes and a secure supply chain for trustworthy components, ensuring strong security and regulatory compliance for the most security-conscious organizations.

For more information on YubiHSM 2 FIPS, please visit the Yubico website. It is also available for purchase on the Yubico store, through Yubico’s dedicated sales team, or from any Yubico-approved channel partners and resellers

About Yubico

Yubico sets new global standards for simple and secure access to computers, mobile devices, servers, and internet accounts. The company’s core invention, the YubiKey, delivers strong hardware protection, with a simple touch, across any number of IT systems and online services. The YubiHSM, Yubico’s ultra-portable hardware security module, protects sensitive data stored in servers.

The company’s technology is deployed and loved by 9 of the top 10 technology companies, 4 of the top 10 U.S. banks, 2 of the top 3 global retailers, and by millions of users in more than 160 countries. Yubico is also a leading contributor to the FIDO2, WebAuthn, and FIDO Universal 2nd Factor open authentication standards. Founded in 2007, Yubico is privately held, with offices in Sweden, UK, Germany, USA, Australia, and Singapore. For more information: www.yubico.com.

Media Contact: 

Zander Wharton 

Public Relations Manager, Yubico

zander.wharton@yubico.com

203-733-2815

Share this article:


  • Goodbye master passwords: Dashlane and Yubico enhance credential vault encryption and login with YubiKeysAt Authenticate 2025 this week, the world’s leading experts on modern authentication and securing digital identities gathered, to discuss the future of secure authentication and achieving usable security across the account lifecycle. The message was clear: the future of phishing-resistant authentication is using passkeys for encryption, and the gold standard is device-bound passkeys – YubiKeys. […]Read morecredential vault encryptioncredential vault loginDashlanepartnerpasskey encryptionPRF
  • Piloting Europe’s future ID: Passkeys securing digital walletsOver the last several years, passkeys have become ubiquitous. They are available on every mobile platform, in every leading browser, as part of all major enterprise IAM solutions, and in most major cloud services. Until wwWallet came along, the only place where passkeys hadn’t yet made an impact is in the rapidly developing world of […]Read moredigital identity walletspasskeysSIROSwwWallet
  • We’re excited for what’s to come – meet us in-person to find out whyIt’s been a busy year for our team, filled with exciting company and product updates aimed at better serving our customers and helping them achieve cyber resilience as AI-driven phishing threats continue evolving globally. Between industry award recognitions and key new executive leadership hires to lead Yubico to its next stage of growth and a […]Read more
  • FIPS certified vs. FIPS compliant: What’s the real difference?“Is your MFA solution FIPS compliant, or is it certified?”  This is a question we hear a lot, and for good reason. In industries where security and compliance are critical (especially in government contracts), understanding the difference between FIPS certified and FIPS compliant isn’t just semantics – it can mean the difference between meeting requirements […]Read moreFIPSNIST