YubiKey 5 FIPS with FIPS 140-3 certification
2026-07-22
For the Ukrainian market – particularly the rapidly growing MilTech sector with its extensive partnerships across the United States – the release of the updated YubiKey 5 FIPS series (powered by firmware 5.7) is especially significant. While Ukraine maintains its own information security standards (KSZI and SSSCIP requirements), the FIPS version is essential for working with U.S. organizations. For Ukrainian defense technology developers, IT outsourcing companies, and financial institutions, FIPS 140-3 certification is often a prerequisite for gaining access to customer environments and participating in joint technology projects.
The defining feature of the new series is full compliance with the most stringent U.S. security standards. The updated firmware has been certified under the latest U.S. Federal Information Processing Standard, FIPS 140-3, which is mandatory for U.S. government agencies and the Department of Defense (DoD). In addition, YubiKey 5 FIPS has been approved by U.S. regulators as the only authenticator capable of storing both traditional smart card certificates (PIV) and modern passwordless passkeys (FIDO2) on a single device.
Beyond regulatory compliance, the new firmware introduces significant technical enhancements designed to defend against sophisticated targeted attacks. Storage capacity has been expanded to support up to 100 passkeys (up from 25), while Enterprise Attestation has been added to simplify device inventory and lifecycle management for system administrators. The update also introduces NFC transport protection, preventing unauthorized access to or manipulation of the device before it is issued to an employee.
For organizations operating exclusively within the domestic market, the standard YubiKey 5 product line continues to provide all the functionalities they typically require. However, for Ukrainian MilTech companies, enterprise organizations, critical infrastructure operators, and IT exporters, YubiKey 5 FIPS with FIPS 140-3 certification provides compliance with Zero Trust requirements and serves as an essential enabler for collaboration with Western partners.
Certified Yubico products and professional guidance on selecting the right solution are available through CLICO Ukraine, the official Yubico distributor.