1Password two-factor authentication: how to set up a security key
Yes, 1Password supports physical FIDO2 security keys as a second authentication factor. With two-factor authentication active, even if someone gets hold of your master password, they cannot access your password manager without the physical key. This guide explains how to set it up step by step. If you're not sure what 2FA is or why it matters, check our guide to two-factor authentication first.
What you need before you start
Before adding a security key to 1Password, make sure you have everything ready:
ℹ️ Requirements
1Password plan: Individual, Families, Teams or Business. All plans support physical security keys.
Compatible YubiKey models: YubiKey 5 NFC, YubiKey 5C NFC, Security Key NFC, Security Key C NFC. All support FIDO2/WebAuthn.
A backup second factor: before adding your YubiKey, make sure you have a recovery code or authenticator app configured as a fallback. If you lose your key with no backup, you could lose access to your account.
Security key vs authenticator app — which is better?
1Password supports both a physical security key and authenticator apps like Google Authenticator or Authy as a second factor. An authenticator app generates a time-based code on your phone. A security key is a physical device — it cannot be phished, copied or intercepted remotely. If you want the strongest protection available, a security key is the better option.
How to add a security key to 1Password
Open my.1password.com in a desktop browser. Click your name in the top right corner and select My Profile.
In the left menu, click Security . You will see all available two-factor authentication options for your account.
Click Add a Security Key. 1Password will prompt you to insert or tap your YubiKey.
If using USB, insert the key and touch the gold contact. If using NFC on mobile, hold the YubiKey against the back of your phone when the prompt appears.
Give it a descriptive name — for example "YubiKey main" or "YubiKey backup". Useful if you register more than one key.
Sign out and sign back in to confirm the YubiKey works correctly as your second factor.
YOU MIGHT ALSO LIKE
How to protect Bitwarden with YubiKey How 1Password two-factor authentication works day to day
Once active, every time you sign in to 1Password on a new or unrecognised device, the app will ask for your YubiKey in addition to your master password.
🔑 How it works on each device
On desktop (USB): insert the YubiKey and touch the gold contact when 1Password prompts you.
On mobile (NFC): hold the YubiKey against the back of your phone. No cable needed — just a tap. Works on Android and iPhone (iOS 13.3 or later).
On trusted devices: 1Password remembers devices you have already verified. You won't need the YubiKey on every login — only on new devices.
What if you lose your YubiKey
⚠️ Always register a second key as backup
If you lose your only registered YubiKey and have no alternative method configured, you could lose access to your 1Password account.
The solution is to register a second YubiKey as backup during the same setup — or keep an authenticator app active as a fallback method.
If you have already lost your key and have no backup, check our guide on what to do if you lose or your YubiKey is stolen — it covers how to recover access to your accounts without the physical key.
Keep your YubiKey with you at all times
The most secure YubiKey is the one you have on you when you need it. Holdtag makes PLA+ accessories in Spain so you can carry your YubiKey in your wallet without adding any bulk.
YubiKey tray — card format
Carry your YubiKey in your wallet alongside your cards. Standard 85.6 × 54 mm format. To use NFC, just hold your wallet up to the reader — no need to take the key out.
Material: PLA+ · Made in Spain
YubiKey tray — 2 slots
Two keys in the space of one card. Main and backup YubiKey always with you — no excuse not to have a second one registered.
Material: PLA+ · Made in Spain
Frequently asked questions
Can I register more than one YubiKey in 1Password?
Yes. 1Password lets you register multiple security keys on the same account. It is strongly recommended to register at least two — one main and one backup — so you don't lose access if you lose one of them.
Does the YubiKey work with the 1Password mobile app?
Yes. The 1Password app for iOS and Android supports YubiKey authentication via NFC. Just hold the key against the back of your phone when the app prompts you. Requires iOS 13.3 or later on iPhone.
What if I need to sign in without my YubiKey?
If you don't have your YubiKey with you, you can use the alternative method you configured — for example an authenticator app. This is why it's important not to remove all alternative methods when you activate the YubiKey.
Does the YubiKey work with 1Password on all browsers?
Yes. The YubiKey works as a FIDO2 security key in Chrome, Firefox, Edge and Safari. No additional extension needed — the browser detects the key automatically when you insert or tap it.
Verdict
The most complete password manager, with the strongest security layer available
1Password is one of the most solid password managers on the market. Adding a YubiKey as a second factor makes it practically impenetrable — even if someone obtains your master password, they cannot get in without the physical key.
Setup takes less than 5 minutes. The most important step: always register a second key as backup before relying on just one.
YOU MIGHT ALSO LIKE
How to protect Proton Pass with YubiKey: complete guide
