{"product_id":"yubikey-5c-fips","title":"YubiKey 5C FIPS","description":"\u003cp\u003e\u003cb\u003eYubiKey 5C FIPS\u003c\/b\u003e is a hardware security key in the YubiKey 5 FIPS Series, used to authenticate at sign-in. Its cryptographic module is validated to \u003cb\u003eFIPS 140-3\u003c\/b\u003e by the U.S. National Institute of Standards and Technology (NIST). It connects via USB-C.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGovernment agencies, and organizations working for government that require FIPS-standard devices\u003c\/li\u003e\n\u003cli\u003eBanks, insurers, securities firms, and other financial service providers\u003c\/li\u003e\n\u003cli\u003eRegulated or audited organizations whose policies allow only validated devices\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eFor personal use, or if your organization has no FIPS requirement, the standard \u003ca href=\"\/en\/products\/yubikey-5c\"\u003eYubiKey 5C\u003c\/a\u003e is simpler to set up because it does not need FIPS mode enabled first.\u003c\/p\u003e\n\u003ch3\u003eFIPS 140-3 validation\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNIST Cryptographic Module Validation Program (CMVP) certificate \u003cb\u003e#5291\u003c\/b\u003e, status Active\u003c\/li\u003e\n\u003cli\u003eOverall \u003cb\u003eLevel 2\u003c\/b\u003e, with physical security at \u003cb\u003eLevel 3\u003c\/b\u003e\n\u003c\/li\u003e\n\u003cli\u003eTested firmware version: \u003cb\u003e5.7.4\u003c\/b\u003e\n\u003c\/li\u003e\n\u003cli\u003eValidated May 22, 2026; sunset date May 21, 2031\u003c\/li\u003e\n\u003cli\u003eValidation applies when the key operates in FIPS approved mode and is configured according to the certificate's Security Policy\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eFIPS mode and setup before use\u003c\/h3\u003e\n\u003cp\u003eThe key ships with \u003cb\u003eFIPS approved mode turned off\u003c\/b\u003e and will not create credentials in any application until that application is in FIPS mode. Your organization's IT team or administrator enables FIPS mode for each application before issuing the key to users. Once enabled, an application cannot leave FIPS mode unless it is reset, which erases that application's data.\u003c\/p\u003e\n\u003cp\u003eKey FIPS mode requirements\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eFIDO2: a PIN of at least 8 characters\u003c\/li\u003e\n\u003cli\u003ePIV: change the default PIN and PUK to at least 8 characters, and change the Management Key to AES\u003c\/li\u003e\n\u003cli\u003eOpenPGP: every PIN must be at least 8 characters\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eConnectivity\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cb\u003eUSB-C\u003c\/b\u003e plugs into a computer, tablet, or phone with a USB-C port\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eSupported protocols\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFIDO2 \/ WebAuthn (passkeys)\u003c\/li\u003e\n\u003cli\u003eSmart card (PIV)\u003c\/li\u003e\n\u003cli\u003eOpenPGP\u003c\/li\u003e\n\u003cli\u003eOATH-TOTP and OATH-HOTP\u003c\/li\u003e\n\u003cli\u003eYubico OTP, supported but outside the FIPS 140-3 validation scope\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eThe key\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDimensions: 12.5 x 29.5 x 5 mm\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eIP68\u003c\/b\u003e water and dust resistant\u003c\/li\u003e\n\u003cli\u003eInfineon secure element, the validated part of the key\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eFAQ\u003c\/h3\u003e\n\u003cp\u003e\u003cb\u003eHow is it different from the standard YubiKey 5C?\u003c\/b\u003e\u003cbr\u003eIt works almost the same way. The differences: this model runs FIPS 140-3 validated firmware, FIPS mode must be enabled before use, PIN length requirements apply, and U2F is disabled. For services that still use U2F, register with FIDO2 instead.\u003c\/p\u003e\n\u003cp\u003e\u003cb\u003eCan I use it right out of the box?\u003c\/b\u003e\u003cbr\u003eNo. FIPS mode must first be enabled for each application you plan to use, which includes setting a PIN of at least 8 characters. In most organizations, IT completes this setup before handing keys to employees.\u003c\/p\u003e\n\u003cp\u003e\u003cb\u003eWhere can I verify the certificate?\u003c\/b\u003e\u003cbr\u003eLook up certificate 5291 on the \u003ca href=\"https:\/\/csrc.nist.gov\/projects\/cryptographic-module-validation-program\/certificate\/5291\" target=\"_blank\" rel=\"noopener\"\u003eNIST CMVP website\u003c\/a\u003e. The Security Policy document can be downloaded from the same page.\u003c\/p\u003e\n\u003cp\u003e\u003cb\u003eHow many keys should each user have?\u003c\/b\u003e\u003cbr\u003eAt least two: one for daily use and a backup registered to every account, so the user can still sign in if a key is lost.\u003c\/p\u003e\n\u003ch3\u003eCorporate purchasing\u003c\/h3\u003e\n\u003cp\u003eUse the \u003cb\u003eRequest a price\u003c\/b\u003e button on this page for a quote and lead time, or email order@siambc.com.\u003c\/p\u003e","brand":"Yubico","offers":[{"title":"Default Title","offer_id":50903098851585,"sku":"YB5CFIPS","price":0.0,"currency_code":"THB","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0729\/2056\/3969\/files\/yubikey-5c-fips.jpg?v=1792549202","url":"https:\/\/siambc.com\/en\/products\/yubikey-5c-fips","provider":"SIAMBC","version":"1.0","type":"link"}