Yubico Authenticator

Overview

Yubico Authenticator is a companion app for generating two-step verification codes using credentials stored on a YubiKey. It suits people who already carry a YubiKey and want the same code credentials to travel between phone and computer. Its security model is also its main constraint: desktop OATH code generation requires the hardware key.

It works with services that accept standard authenticator codes, including Google Authenticator-compatible services; Yubico cites Azure MFA TOTP for Office 365 as an example. The maker, founded in 2007 and headquartered in Stockholm, Sweden, provides a user guide in its product documentation.

Compare other options in our Authenticator apps and Security Keys lists.

Key features

Codes stay with the key

The app generates and displays OATH codes, including TOTP and HOTP. To add an account, scan the QR code provided by the service you want to protect. Credentials are kept in the YubiKey secure element, which Yubico says prevents them from being extracted. That can suit people who prefer credentials to remain on a physical key, but it makes the key essential: the free app requires a YubiKey to store credentials and generate OATH codes.

Yubico says codes are available in its mobile and desktop apps because the credentials travel with the key. This is cross-device access without multi-device sync, rather than a cloud-synced copy; if you want codes without carrying or connecting the key, this is not the right fit.

Mobile access and key management

On NFC-enabled phones, the mobile app supports tap-and-go authentication, and credentials can be added to a YubiKey with a touch or NFC tap. Yubico says Face ID or Touch ID can unlock the key. The app also manages a YubiKey's FIDO PIN and can perform a factory reset, giving it a role beyond code display.

OATH code generation and display are distinct from the app's passkey and FIDO standards support. Desktop OATH use specifically requires a YubiKey. The app does not offer push approvals, encrypted backup, multi-device sync, or team administration, so it is aimed at individual key owners rather than teams seeking centralized management.

Pricing

Yubico Authenticator: free. The free, open-source software has no trial period because it is free; the key condition is that a YubiKey is required to store credentials and generate OATH codes. Yubico also lists paid YubiKeys from 29 one-time. That hardware purchase is separate from the app and is the practical cost for anyone who does not already own a compatible key.

There are no cheaper app tiers to weigh against missing features: the choice is whether the key-based approach fits. The app has no team administration or cloud-style recovery and sync, which may matter more than its zero software price for people managing codes across devices without a physical key.

Platforms

Yubico Authenticator is available for Windows, macOS, Linux, iOS/iPadOS, and Android. NFC tap-and-go support applies to NFC-enabled mobile devices; desktop OATH generation still requires a YubiKey.

Who it's for

This is a strong fit for people who already use a YubiKey and want OATH credentials held on its secure element, with access from Yubico's mobile and desktop apps by moving the key between devices. It is less suitable for anyone who expects an authenticator app to work independently, sync credentials online, provide encrypted recovery, or support team administration.

Pros and cons

• Credentials stored on the YubiKey: Yubico says they cannot be extracted from its secure element, keeping the credential store tied to the physical key.
• One credential store across phone and computer: the portable key makes the same codes available in the mobile and desktop apps without multi-device sync.
• Broad device coverage: apps span desktop and mobile platforms, with NFC tap-and-go on supported phones.
• Hardware is mandatory for desktop OATH: users cannot generate and display those codes in the desktop app without a YubiKey.
• No backup, sync, or team administration: users wanting recovery copies or centralized team controls will need another approach.

Alternatives

Ente Auth is worth considering if you want a free, open-source authenticator with data export and import across mobile, desktop, and web platforms.

Bitwarden is another alternative for readers comparing authenticator options alongside its free and paid plans.

SAASPASS Authenticator offers a free personal-use mobile app and a free trial for its freemium offering.

Proton Authenticator is a free, open-source alternative available on mobile and desktop.

Zoho OneAuth is free across supported platforms for Zoho work accounts and personal online accounts, with time-based OTP authentication.

HYPR Authenticate is an alternative to consider if you are evaluating a paid authentication product with a free trial.

Duo Mobile has a free plan for up to 10 users and paid plans for organizations seeking additional authentication features.

LastPass offers a free plan limited to one device type, as well as paid plans.

Verdict

Choose Yubico Authenticator if you already rely on a YubiKey and want verification-code credentials to remain on its hardware secure element while using them on mobile and desktop. The decisive reason to look elsewhere is the same hardware dependency: without a YubiKey, desktop OATH generation is unavailable, and the app provides no sync or encrypted backup as a fallback.