YubiKey
What is a YubiKey?
YubiKeys represent the security keys developed by
Yubico, which can be used to enable multi-factor authentication (MFA). YubiKeys don't require a battery to function and need no software installation to authenticate your accounts.
How YubiKeys work?
First, you will have to register your YubiKey with your Zoho account. After registering, when you try to sign in to your account, you will be prompted to verify using your YubiKey. When prompted, you will either need to insert the YubiKey on to your device's port and tap its gold disc, or connect via NFC to verify. Once verification is complete, you will be signed in to your account.
YubiKey in Zoho: Points to note
- Zoho supports both FIDO U2F and FIDO2-based YubiKeys
- You can register multiple YubiKeys for your Zoho account, and use anyone of them to sign in.
- You can also register the same YubiKey with multiple Zoho accounts and use it to sign in to them.
- You can also sign in to your mobile devices by connecting your YubiKey through the device's port or through NFC.
Supported devices
FIDO U2F and FIDO2-based YubiKeys are supported in Zoho.
How to register an YubiKey with Zoho account?
Requirements
- A FIDO U2F or FIDO2-based YubiKey
- A supported browser and device
Steps to register
- Sign in at accounts.zoho.com.
- Click Multi-Factor Authentication in the left menu.
- Click Set up Now under YubiKey.
- If you are registering on a computer:
- Insert it into the USB port of your computer.
- Click Next.
- Wait for the YubiKey to blink, then tap its gold disc.
- Name your YubiKey, then click Configure.
- Sign out of your Zoho Account and sign in back to confirm that YubiKey authentication is enabled.
If you are registering on a mobile device, you can connect your YubiKey either via device's port or through NFC. Follow the on-screen instructions to connect and register.
Using these steps, you can configure multiple YubiKeys for your account.
How to set YubiKey as primary MFA mode?
If you have configured multiple MFA modes for your account, you can set one of them as your primary MFA mode. When you try to sign in, your primary mode will be the default mode for authentication.
To set YubiKey as primary MFA mode:
- Sign in at accounts.zoho.com.
- Click Multi-Factor Authentication in the left menu.
- Click MAKE PRIMARY next to YubiKey.
- Click Confirm.
How to sign in using YubiKey?
If YubiKey is your primary MFA mode, follow the steps to sign in:
- Go to the Zoho sign-in page.
- Enter your email address, then click NEXT.
- Enter your password, then click SIGN IN.
- If you are signing in on a computer:
- Insert it into the USB port of your computer.
- Click Next.
- Wait for the YubiKey to blink, then tap its gold disc.
If you are signing in on a mobile device, you can connect your YubiKey either via device's port or through NFC. Follow the on-screen instructions to connect and authenticate.
If you have set up multi-mode MFA with another MFA mode as your primary mode, see
how to sign in using YubiKey.
Note : If you are using a mail client, you may have issues signing in to it once you enable MFA (in most cases, "incorrect password" error will be shown). This is because your mail client doesn't support MFA. In this case, you can use application-specific passwords to bypass MFA and sign in to your mail client.
How to recover account if YubiKey is not accessible?
If you can't sign in to your account due to issues with your YubiKey, then you can recover access to your account using your previously-generated
backup verification codes.
See
how to use backup codes to recover your account. Once you get access, make sure to re-configure YubiKey with your account or a different MFA mode.
If you haven't generated backup codes previously or lost them, contact our support team at
support@zohoaccounts.com. After verifying your identity, you will be provided with a backup code to sign in to your account.
Related articles
- How to use application passwords for mail clients
- How to disable/re-enable MFA
- MFA: Frequently asked questions
- MFA: Troubleshooting
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
Zoho SalesIQ Resources
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Zoho DataPrep Resources
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Bigin?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
Related Articles
Multi-Mode MFA
Introduction Multi-mode MFA is an option wherein you can enable more than one MFA mode for your Zoho account. Zoho provides four modes to choose from: OneAuth, SMS-based OTP, app-based OTP (authenticator apps), and YubiKey. To enable multi-mode MFA, ...Troubleshoot MFA related issues
Introduction If you have set up multi-factor authentication (MFA) to protect your Zoho account and have issues signing into your account, we will help you regain your account access. The first thing you need to do after regaining account access ...Introduction to multi-factor authentication (MFA)
Multi-factor authentication is used as an extra layer of security while signing in to your account. When you enable MFA, all your future sign-ins will require you to verify your identity to ensure that your account isn't accessed by unknown users. ...How do I delete an MFA mode in my account?
We suggest that you do not disable MFA for your account. However, if you're uninstalling your authentication app, follow these steps to disable MFA as well. Sign in to your Zoho account. Click Multi-Factor Authentication. Click next to the MFA mode ...How do I enable MFA for my account?
Sign in to your Zoho account. Click Multi-Factor Authentication. Select your preferred MFA mode. For your authentication needs, we suggest that you download OneAuth, our very own multi-factor authentication app, which offers four different MFA modes: ...