The standard-sized YubiKeys, such as the YubiKey NFC version I tested, are made of injection moulded plastic encasing the circuitry, while the USB-connector and touchpad consist of military-grade hardened gold.

The YubiKey as a device is nearly indestructible. Using a YubiKey is also a matter of convenience as many service providers allow you to get rid of having to enter the one-time password (OTP). In addition, the YubiKey 5 series can be used in conjunction with a PIN for user verification - the PIN unlocking the device locally and touch needed for the YubiKey to perform the authentication. To start with the latter: a physical key requires - literally - a human touch and cannot be hacked remotely.

Why would you need a YubiKey when a one-time password - usually a six-digit number - is considered secure enough by service providers? Convenience is one reason and an added layer of security is another. The former is a USB-A key with near field communications capabilities, while the latter is a dual-port key for USB-C and Lightning devices such as the iPhone/iPad range, but also Android devices and, indeed, the Mac.

Yubico brave