Yubico launches YubiKey Passkey Enabler app for Android devices

Yubico has released the YubiKey Passkey Enabler, a dedicated Android Credential Provider app designed to streamline the use of hardware-backed passkeys. The tool arrives as Yubico seeks to bridge existing gaps in Android's native FIDO2 support and capitalize on recent updates to Google Play Services.

The app allows users to perform passkey registration and authentication via NFC and USB interfaces. While Google recently expanded Android’s support for security keys by introducing passkey authentication over NFC, swjm.blog reports that the implementation remains dependent on Google Play Services and does not yet expose all capabilities of current FIDO2 specifications. The YubiKey Passkey Enabler acts as a utility to extend compatibility to more devices and provide additional FIDO2 capabilities.

Media additions

The software is built using Yubico’s YubiKit SDK and the Android Credential Manager Provider API. It is designed to work on Android 9 and later for NFC security keys that support CTAP2. According to the company, the app operates without requiring connectivity and supports any USB and NFC-enabled YubiKeys.

Enterprise Deployment and Security

For corporate environments, the YubiKey Passkey Enabler can be centrally deployed and configured through Mobile Device Management software. This allows IT departments to implement a consistent authentication workflow across Android fleets without requiring manual configuration from end users.

The app focuses on resisting phishing and adversary-in-the-middle attacks by cryptographically binding credentials to a website's origin. To ensure this protection, the provider verifies the authenticating user before any signing occurs. For requests coming through browsers, the app only accepts those from trusted sources and verifies that the website’s origin matches the relying party ID. When dealing with native Android apps, the provider utilizes Digital Asset Links to confirm the calling app is authorized. If verification fails, the request is rejected before any cryptographic operation is performed.

"Passkeys are one of the most important shifts in digital identity, but security only works when people can actually use them,"

Geoff Schomburgk, Vice President, Asia Pacific and Japan, Yubico, via Scoop

Schomburgk added that Google's expanded support for NFC-enabled FIDO2 security keys is a major step for the ecosystem, allowing organizations to deliver a more intuitive experience while increasing security.

Hardware Compatibility and Functionality

The YubiKey Passkey Enabler prioritizes strong user verification and discoverable credentials. It is compatible with several hardware lines, including:

• YubiKey 5 Series
• YubiKey 5C NFC Series
• YubiKey 5 FIPS Series
• Security Key Series
• YubiKey Bio Series

The app is designed to be user-friendly, providing visual guidance on where to tap the YubiKey based on the specific position of the NFC reader in the user's phone. Additionally, updates to the software have improved sign-in reliability, ensuring the security key PIN is requested only when a specific site requires it.

Users who wish to manage credentials, such as one-time passwords and passkeys, or adjust security settings on their keys, must use a separate application called Yubico Authenticator.

Comparison of Yubico Android Tools

Feature	YubiKey Passkey Enabler	Yubico Authenticator
Primary Purpose	Passkey registration and authentication	Credential and settings management
Connectivity	USB and NFC	USB and NFC
Key Functions	FIDO2/CTAP2 sign-in, phishing resistance	Manage OTPs, passkeys, and security settings
Deployment	Supports MDM for enterprise fleets	Standard user application

The YubiKey Passkey Enabler is available now for both individual Android users and enterprise deployments.