Add a YubiKey to Proton (Pass, Mail): Step-by-Step
A leaked password is enough to open an account that has no second factor. A security key such as a YubiKey adds a physical step. If it is your only second factor, the password alone is not enough to sign in.
You register the key once in your Proton account settings. Proton says two-factor authentication is available on all its services and apps. That includes Proton Pass and Proton Mail. Proton is the Swiss company behind both.
Proton accepts U2F and FIDO2 security keys. The YubiKey 5 NFC, YubiKey 5C NFC, Security Key NFC and Security Key C NFC are all FIDO2 keys.
How to add a YubiKey to your Proton account
- 1.- Open your account settings — Sign in at account.proton.me. Click the gear icon, then All settings.
- 2.- Find two-factor authentication — Select Account and password and scroll to Two-factor authentication. Turn on the Security Key option. Proton may ask for your password and another 2FA method.
- 3.- Register your YubiKey — Insert the key into a USB port and click Continue. Leave Allow platform keys unchecked to register a physical key. Touch the key when your browser asks. Then name it and click Continue.
⚠️ Add a backup before you sign out
Proton allows up to four keys. Register a second key and keep your 2FA recovery codes. If you lose your only key and have no other method, you may be locked out of your account.
Good to know
Safari has a known bug that can block security key sign-in. Force quit it and reopen it, or use another browser.
Tor Browser does not support security keys.
The protonvpn.com website does not support them either. Use proton.me.
Details come from Proton's security key guide.
Try Proton Pass
Proton Pass has a free plan. Paid plans add more features. Check Proton's pricing page for what each plan includes.
Try Proton Pass →affiliate link
Frequently Asked Questions
Does a YubiKey work with both Proton Pass and Proton Mail?
Yes. You register the key in your Proton account settings. Proton says two-factor authentication is available on all its services and apps. Set it up on proton.me, not on protonvpn.com.
Can I use the YubiKey by NFC on my phone?
Proton's security key guide describes setup in the web settings and does not mention NFC. The YubiKey 5 NFC, YubiKey 5C NFC, Security Key NFC and Security Key C NFC all have NFC. Check that your Proton app supports it before relying on it.
Can I add more than one key?
Yes. Proton allows up to four security keys per account. Register at least two and keep the backup in a safe place.
Do I need an authenticator app as well?
No. Proton does not require an authenticator app before you add a security key. You can enable both. Proton notes that apps are more convenient, while security keys resist phishing better.
What if I lose my YubiKey?
Sign in with another 2FA method you enabled, such as an authenticator app or a second key. Otherwise, use a 2FA recovery code. Then delete the lost key from the security keys list in your settings.
Why does my key not work in Safari?
Proton lists a known Safari bug that can block security key sign-in. Force quit Safari and reopen it, or use another browser.
YOU MIGHT BE INTERESTED
How to protect ProtonMail with YubiKey: A step-by-step guide Recommended Products
YubiKey 5 NFC
A FIDO2 key with USB-A and NFC. No battery and no app. Works with Proton and other services that support FIDO2.
Same steps with YubiKey 5C NFC, Security Key NFC and Security Key C NFC
YubiKey Case with Lanyard
Made in Spain from PLA+. Protects your YubiKey from knocks and scratches. Integrated lanyard to carry it with you.
VIEW PRODUCTS YubiKey security keys and accessories recommended by Holdtag
Conclusion
One security key protects your whole Proton account
You register the YubiKey once in your Proton account settings. Proton says it covers all its services and apps, including Pass and Mail.
The main risk is losing access. Register a second key and keep your recovery codes before you rely on it.
As an Amazon Associate, I earn from qualifying purchases.
