Body
What YubiKeys can I buy?
We recommend the following YubiKey Basic models:
Both models support NFC for use with compatible mobile devices.
My YubiKey is asking for a PIN or password. What should I do?
This is the PIN or password used to access your YubiKey credentials directly. Depending on the authentication method being requested, you may be prompted to set up or use a PIN or password.
Remember this PIN or password. It cannot be recovered without factory resetting your YubiKey.
See the How to Factory Reset a YubiKey knowledge base article for more information.
What restrictions are there when using my -a account?
We recommend working in two different browsers, or using a private browser window and a regular browser window, when authenticated with your non-admin and -a accounts.
For example, you cannot authenticate with your -a account and then access your email using the same browser session.
Can I insert my USB-A YubiKey upside down or backwards?
No. The USB-A YubiKey must be inserted in the correct orientation. If inserted backwards, it will not work.
If I work remotely, where does my YubiKey need to be?
Your YubiKey must be physically with you at the computer you are using to authenticate.
You cannot simply plug a YubiKey into your on-campus computer and use it remotely from home. The YubiKey requires physical touch to authenticate each time.
Can I leave one YubiKey plugged into my work computer and use another one from home?
We strongly advise against leaving your YubiKey plugged into your system under any circumstances.
If you work from home occasionally, keep your YubiKey with you and use it at the computer where you are authenticating.
How do I use my YubiKey with my phone?
Both USB-C and USB-A YubiKeys support NFC.
- Turn on NFC on your phone.
- When prompted, hold the YubiKey against the back of your phone with the button facing outward.
- Tap your finger on the YubiKey button when prompted.
I use direct-UI logins to Salesforce. What do I need to know?
You will have a unique YubiKey credential for your Salesforce direct-UI login. This credential is separate from your SSO credential, although both credentials are stored on the same YubiKey.
Note: Sandbox refreshes may affect your sandbox credential. The specific behavior and any required steps are still being confirmed.
How do I use my YubiKey through Remote Desktop (RDP) on Windows 11?
If you need to use your YubiKey through Remote Desktop on Windows, enable WebAuthn redirection so the YubiKey can function.
- Open Remote Desktop Connection.
- Select the Local Resources tab.
- Select More… under Local devices and resources.
- Ensure WebAuthn (Windows Hello or security keys) is enabled. You may need to plug in your YubiKey before the checkbox appears.
Your YubiKey must be physically with you at the computer you are remoting from, rather than plugged into the remote system.
