YubiKey Manager: How to Configure and Manage Your Key Step by Step
Introduction
If you've just received your YubiKey, the first thing you should do before registering it with any service is install YubiKey Manager. This application allows you to verify that the key is working correctly, see exactly which model you have, and configure the device's basic settings.
You don't need any technical knowledge to use it. In this guide, we explain what it is, what it's for, and how to get started from scratch.
What is YubiKey Manager?
This is the official Yubico app for managing your security key from your computer. When you connect your YubiKey, it automatically detects it and displays the model, firmware version, and which functions are enabled.
It is available for Windows, macOS, and Linux, and does not require the installation of additional drivers.
Why do you need it if you're new?
Although you can register your YubiKey with services like Google or GitHub without installing anything, YubiKey Manager is useful from day one for:
- Confirm that your key has arrived in good condition and is recognized by the system.
- See exactly which model you have and what protocols it supports.
- Set a FIDO2 PIN (required for some services)
- Reset the key if at any point you want to start from scratch
Install YubiKey Manager, connect your key, and verify that it is correctly identified before registering it with any service. This confirms that the device is working properly from the start.
Download YubiKey Manager
Choose your operating system:
First steps after installing
Once installed and with your YubiKey connected, this is what you will see and what you should do:
When you open the app, you'll see the exact model of your key (for example, YubiKey 5 NFC) and the serial number. If nothing appears, try disconnecting and reconnecting.
In the Interfaces menu, you can see which protocols are enabled on your dongle. For standard use, you don't need to change anything, but it's helpful to know what's enabled.
Go to Applications → FIDO2 and set a PIN. Some services require it, and it's good practice to enable it from the start. Choose something you'll remember: if you forget it, you'll have to reset the module.
With this done, your YubiKey is ready to register with services like Google, GitHub, Microsoft, or any platform compatible with FIDO2.
Model compatibility
Not all YubiKey models have the same features available in Manager:
| Model | FIDO2 | PIV | OTP | Management in Manager |
|---|---|---|---|---|
| YubiKey 5 (all variants) | ✅ | ✅ | ✅ | Complete |
| Security Key by Yubico | ✅ | ❌ | ❌ | FIDO2/U2F only |
| YubiKey Bio | ✅ | ❌ | ❌ | FIDO2 (without biometrics) |
| Older U2F models | ⚠️ U2F only | ❌ | ❌ | Very limited |
Note: If you have a YubiKey Bio, fingerprints are not managed from here. For that, you need Yubico Authenticator or the operating system's tools.
Technical functionalities
For those who want to go beyond basic use, here's what you can configure Manager for:
| Functionality | What it allows you to do | Available in |
|---|---|---|
| ID | View model, firmware, and serial number | All models |
| FIDO2 | Change PIN and reset module | YubiKey 5, Security Key, Bio |
| PIV (Smart Card) | PIN, PUK, certificates and reset | YubiKey 5 |
| OTP | Configure, protect, and manage slots | YubiKey 5 |
| Interfaces | Activate or deactivate protocols | According to model |
Technical note: OATH-TOTP configuration (6-digit codes) is only available in the CLI version or in Yubico Authenticator, not in the graphical interface.
Frequently Asked Questions
Do I need YubiKey Manager to use the key?
It's not mandatory, but it's highly recommended. Without it, you can't verify that the key works correctly or configure the FIDO2 PIN.
What happens if I forget my FIDO2 PIN?
You will need to reset the FIDO2 module from YubiKey Manager. This will delete all credentials registered to that module, so you will have to re-register the key with each service.
Does it work on Mac with Apple Silicon (M1, M2, M3)?
Yes. The .pkg installer is universal and works on Macs with Intel and Apple Silicon chips.
Can I use YubiKey Manager without an internet connection?
Yes. The app works completely offline. You only need an internet connection to download it.
Conclusion: what to do right now
If you just received your YubiKey, these are the steps in order:
- 1 Download and install YubiKey Manager according to your operating system.
- 2 Connect the key and verify that it is correctly identified.
- 3 Set a FIDO2 PIN from Applications → FIDO2.
- 4. Register the key in your primary email and password manager.
- 5. Store the recovery codes for each service in a safe place.
With this done, your account is protected against phishing even if someone gets hold of your password.
