YubiKey PIV

YubiKey PIV (Personal Identity Verification) is a hardware-based authentication tool that implements the PIV standard for secure identity verification, commonly used for multi-factor authentication (MFA) and digital signing. It stores cryptographic keys and certificates on a physical YubiKey device, providing strong security against phishing and credential theft. This enables users to authenticate to systems, sign documents, or encrypt data without exposing private keys to potentially compromised computers.

Also known as: YubiKey Personal Identity Verification, YubiKey PIV Smart Card, YubiKey PIV Mode, YubiKey FIPS, YubiKey PIV Standard

Why learn YubiKey PIV?

Developers should use YubiKey PIV when implementing or requiring high-security authentication for applications, such as in government, finance, or enterprise environments where compliance with standards like FIPS 201 is necessary. It is ideal for scenarios like SSH key storage, code signing, VPN access, or smart card logins, as it offers tamper-resistant hardware protection that software-based solutions cannot match.

Learning Resources

• docs: Yubico PIV Introduction
• tutorial: YubiKey PIV Setup Guide
• docs: PIV Standard Overview by NIST
• tutorial: Using YubiKey PIV for SSH Authentication