Yubico unveils security key with built-in fingerprint reader

Yubico is showing off an upgraded security key that requires your fingerprint to activate the device.

The YubiKey Bio marks the first time the company will offer a security key with built-in fingerprint authentication. Yubico has been previewing the device at Microsoft's Ignite conference as a way for enterprise customers to unlock access to their Azure Active Directory accounts.

Although security keys are pricey ($20 to $50), they offer the best protection to stop hackers from hijacking your online accounts. Anyone logging in will need to supply both the password and insert the hardware-based security key into the computer's USB port to gain access.

The technology is particularly resistant against cybercriminals based hundreds of miles away, who have no way to physically steal a key. But what happens if you lose the key, or it gets stolen by a mischievous co-worker or even a spy?

Well, then you might be in trouble. It's why users of security keys typically have several backups on hand. This allows them to go into their online accounts, and invalidate the lost or stolen key—hopefully before the bad actor breaks in.

The upcoming YubiKey Bio guards against such an event. By requiring the owner's fingerprint, the upgraded security key can still stymie any thieves who try to use the device to break into your online accounts. The same device also promises to offer a completely password-less login solution as well. All you'll need to do is slot in the key to your computer and sign in with your fingerprint.

There's no word yet on when Yubico will launch the product and at what price. But the company said fingerprint recognition has been a much-requested feature.

The key itself requires no batteries or associated software. To register your fingerprint, you can use the biometric enrollment function on Windows 10 and Azure Active Directory.

The device also uses the FIDO 2.0 and WebAuthn standards, which creates a cryptographic key based on your fingerprint's image. Like the fingerprint scans on your smartphone, the biometrics are designed to never leave the device.