X

iPhone set to match Android security with new Yubico hardware key

Lightning port compatibility is in the works for hardware-based authentication.

Stephen Shankland Former Principal Writer
Stephen Shankland worked at CNET from 1998 to 2024 and wrote about processors, digital photography, AI, quantum computing, computer science, materials science, supercomputers, drones, browsers, 3D printing, USB, and new computing technology in general. He has a soft spot in his heart for standards groups and I/O interfaces. His first big scoop was about radioactive cat poop.
Expertise Processors, semiconductors, web browsers, quantum computing, supercomputers, AI, 3D printing, drones, computer science, physics, programming, materials science, USB, UWB, Android, digital photography, science. Credentials
  • Shankland covered the tech industry for more than 25 years and was a science writer for five years before that. He has deep expertise in microprocessors, digital photography, computer hardware and software, internet standards, web technology, and more.
Stephen Shankland
2 min read
The YubiKey for Lightning supports Apple's proprietary iPhone and iPad port on one end and the USB-C port common on Android phones and PCs on the other end.

The YubiKey for Lightning supports Apple's proprietary iPhone and iPad port on one end and the USB-C port common on Android phones and PCs on the other end.

Yubico

Hardware security key maker Yubico has a new product in the works to give iPhones the same authentication technology available today to Android phones and to Windows and Mac personal computers.

Previewed at the CES show this week, the YubiKey for Lightning supports Apple's proprietary iPhone and iPad port on one end and the USB-C port common on Android phones and PCs. By tapping into logon standards such as FIDO 2, WebAuthn, and U2F, hardware security keys provide extra security in addition to passwords -- or sometimes with no password at all.

Hardware security keys are an important development in the quest to keep accounts secure from hackers and identity thieves. The new YubiKey for Lightning should help iPhone owners keep up with modern practices.

Passwords are plagued with shortcomings -- chiefly that the ones easiest to remember and type are the most vulnerable -- and even stronger protections like one-time codes sent by text message are increasingly vulnerable. Google credits its security keys for thwarting phishing attacks against its employees.

To use the keys, from companies like Yubico and Feitian, you insert the key into your device's USB port during logon and push a button. You might have to use them in conjunction with a second authentication factor like passwords, fingerprints or face recognition. Some of Yubico's keys work wirelessly, too, with NFC (near-field communication) radio technology.

Even though newer iPhones support NFC, though, there are limits that hobbled YubiKey abilities. The Lightning-enabled model should get around those, Yubico said.

The product should be a boon to anyone using hardware keys to protect accounts like Gmail, Microsoft Outlook and Office 365, Dropbox, Twitter, Facebook, Github, LastPass, 1Password and Dashlane.

iHate: CNET looks at how intolerance is taking over the internet.

Solving for XX: The industry seeks to overcome outdated ideas about "women in tech."