Proton Pass con YubiKey
Guides and Tutorials

How to Protect Proton Pass with YubiKey: Step-by-Step Guide

You can add a YubiKey to Proton Pass in less than two minutes from your account security settings. Once activated, the physical key is mandatory to log in — no leaked password can open your account without it.

Proton Pass is an end-to-end encrypted password manager developed by Proton, the Swiss company behind ProtonMail. It stores your passwords, email aliases, and card data with zero-knowledge encryption — they cannot read your vault. Adding a YubiKey as a second factor turns that manager into the strongest link in your digital security: even if someone gets your master password, they cannot enter without the physical key in hand.


How to add your YubiKey to Proton Pass

  • 1.- Enter security settings — Go to account.proton.me/pass and log in. Click the gear icon in the top right corner and select Security.

Security settings in Proton Pass

  • 2.- Access the Account section — Within Security, locate the Account section. Here are all the two-factor authentication options available for your Proton account.

Account section in Proton Pass

  • 3.- Add your YubiKey as a new security key — In Account and password, click + New security key. Proton will ask for your current password. Then connect your YubiKey to USB or bring it close via NFC and touch the golden contact when it lights up.

Add YubiKey in Proton Pass

⚠️ Save a recovery method

Before logging out, make sure you have a second 2FA method active (recovery code or a second YubiKey). If you lose the key without a backup, you won't be able to access your account.


Get Proton Pass with a discount

Proton Pass has a free plan available. If you want access to all features — unlimited aliases, access on all devices, and priority support — the paid plan includes all Proton services.

Try Proton Pass →

Frequently Asked Questions

Does the YubiKey work on the Proton Pass mobile app?

Yes. On iOS and Android you can use the YubiKey via NFC — bring it to the back of your phone when prompted. You need a model with NFC: YubiKey 5 NFC or Security Key NFC.

Can I add more than one YubiKey?

Yes, you can register several keys. It's recommended to have at least two: one primary and one backup stored in a safe place. If you lose the primary one, you can access with the second one.

If I activate the YubiKey in Proton Pass, does it also activate in ProtonMail and Proton Drive?

Security key configuration is done from account.proton.me and applies to the login of your entire Proton account. Once configured, it will ask for it when you access any Proton service from an unrecognized device.

What if I lose my YubiKey?

You can access with your alternative recovery method (recovery code or second YubiKey) and delete the lost key from security settings. That's why it's important to always have a backup.



Recommended Products

Recommended YubiKey 5 NFC

YubiKey 5 NFC

The most versatile key: compatible with USB-A and NFC. Works with Proton Pass, ProtonMail, Gmail, Binance and more than 700 services. No battery, no app.

✅ USB-A + NFC · Compatible with all 4 Proton models · FIDO2 / WebAuthn
View on Amazon
YubiKey case with lanyard

YubiKey Case with Lanyard

Made in Spain from PLA+. Protects your YubiKey against impacts and scratches from daily use. With integrated lanyard to carry it with you always.

✅ Compatible with YubiKey 5 NFC · 5C NFC · Security Key NFC · Made in the EU
View on Amazon

Recommended products VIEW PRODUCTS YubiKey security keys and accessories recommended by Holdtag

Conclusion

Proton Pass + YubiKey: the hardest password manager to hack

The process takes less than two minutes and requires no technical knowledge. Once the YubiKey is configured, your password vault is protected by zero-knowledge encryption plus physical authentication — the most robust combination that exists today for a non-technical user.

If you already have a YubiKey, there's no excuse not to activate it in Proton Pass. If you don't have one yet, now is the time to take the step.

Back to blog