YubiHSM
YubiHSM 2 v2.4
$650
The YubiHSM YubiHSM 2 v2.4 is a phishing-resistant hardware authenticator engineered for individuals and organizations that demand verifiable, audited security. Sourced through Exotec's authorized reseller channel, every unit ships sealed from the manufacturer with full warranty support and discreet, signature-required delivery worldwide. Configuration assistance and enterprise deployment guidance are available on request.
- Secure generation and storage of cryptographic keys independent of the server
- Supports a wide spectrum of algorithms including RSA, ECC and AES
- Nano-Form factor enables installation in standard USB ports without extra hardware
- Role-based access control for enhanced administrative security
- Supports network-based sharing between multiple servers and applications
- High performance with capacity for hundreds of cryptographic operations per second
Discreet shipping
Authorized reseller
30-day returns
Specifications
- Brand
- YubiHSM
- Model
- YubiHSM 2 v2.4
- Form factor
- USB-A Nano
- Interface
- USB 2.0
- Cryptographic support
- RSA 2048-4096, ECC P-256/P-384, Ed25519, AES, HMAC
- Certification
- FIPS 140-2 Level 3 (for specifika modeller/firmware)
- Drivrutiner
- Windows, Linux, macOS
- Weight
- 1 g
- Warranty
- 12 months
Frequently asked
- Does YubiHSM 2 v2.4 support FIDO2 / WebAuthn?
- Yes. YubiHSM 2 v2.4 implements FIDO2 / WebAuthn and works as a passkey for any service that accepts a security key.
- Does it support OpenPGP and PIV?
- YubiHSM keys in this listing implement OpenPGP for code-signing and email, and PIV for smart-card login. Confirm the exact applet set on the spec sheet above.
- USB-A, USB-C, NFC or Lightning?
- Connector type is listed in the specifications. Choose the form factor that matches your laptop and phone.
- Can I use YubiHSM 2 v2.4 with iPhone?
- Yes — over NFC or via the Lightning / USB-C model. Apple supports security keys for Apple ID and for any WebAuthn site in Safari.
- Does YubiHSM 2 v2.4 work with Google, Microsoft, GitHub, AWS?
- Yes. All major identity providers accept FIDO2 hardware keys including YubiHSM.
- What happens if I lose the key?
- Best practice is to enroll two keys on every account. We sell two-packs for exactly this reason.
- Is the firmware open source?
- Some YubiHSM keys ship open-source firmware; others closed. Spec sheet above lists firmware status per model.
- Can YubiHSM 2 v2.4 sign git commits?
- Yes via OpenPGP — pair with gpg-agent or with sigstore for keyless variants.
- How is YubiHSM 2 v2.4 shipped?
- Discreetly via tracked international courier. Packaging carries no Exotec or product branding.
- Do you ship to my country?
- We ship worldwide except to OFAC-sanctioned jurisdictions. See our Restricted Countries policy for the current list.
