DEVELOPED BY
Use security keys for phishing-resistant MFA
Access the NordPass password manager with a YubiKey or any FIDO2-certified security key for added protection.
Works with YubiKey 5 Series and other FIDO-compliant security keys.
MFA enforced across your entire team.
Insert or tap the security key to log in.
Which MFA methods are phishing-resistant?
For MFA to really protect against phishing, attackers shouldn’t be able to trick you into handing over your second factor. Right now, security keys are the only MFA method that prevents that second factor from being accidentally shared.
| Authentication method | Is it phishing-resistant? | Why |
|---|---|---|
| SMS or email code | No | Codes can be forwarded, intercepted, or entered into fake websites. |
| Authenticator app (TOTP) | Partially | Codes are typed in, which means they can still be captured by attackers. |
| Push approval | No | Vulnerable to MFA fatigue and accidental approvals. |
| Security key (YubiKey, FIDO2) | Yes | Requires physical possession and is bound to the legitimate domain. |
Why use a security key to access your vault?
A security key provides extra protection against account takeovers without adding extra hassle.
Keeps attackers out
Even if a threat actor has your login details, they can’t access your NordPass vault without the security key.
Highly resistant to phishing
Since a security key is a physical device, it can’t be digitally stolen. It also doesn’t generate any codes that attackers can trick users into sharing.
Easy for everyone to use
All you have to do to log in is insert or tap your security key. This means less time spent typing TOTP or SMS codes.
Which security keys work with NordPass?
NordPass supports U2F and FIDO2 keys certified by the FIDO Alliance. If your team already uses YubiKeys, they will work with NordPass right out of the box.
YubiKey 5 Series
YubiKey Bio Series
iePass FIDO K44
MultiPass FIDO K25
ePass FIDO NFC K9 and K35
BioPass FIDO K26 and K27
Other FIDO-certified keys
Become a NordPass user to get YubiKeys at 20% OFF
Start using our password manager today and get YubiKeys, including Series 5 and Bio models, at a lower price.
How to set up MFA with a security key
Adding security keys to NordPass takes just a few minutes, while admins can enforce their use across the entire organization at any time.
If you have a business account
Log in to your NordPass vault and open Settings.
Open the multi-factor authentication menu.
Click the Set Up button next to the Security keys option.
Verify your identity with the code sent to your email.
Insert or tap the security key when prompted.
Give the key a name so you can identify it later.
Add a second key as a backup (optional but recommended).
Download your backup codes and store them somewhere safe.
How to log in with a security key
Enter your NordPass Business password or use company SSO.
Insert or tap your security key.
Enter your master password or use biometrics if required.
Deploy it. Then, prove that it works.
NordPass gives admins the tools to require strong authentication and the records to demonstrate its effectiveness during an audit.
Require MFA across the entire organization
Make multi-factor authentication mandatory for every user so every account is protected by more than just a password.
Connect your identity provider
Integrate with Entra ID, Okta, MS ADFS, and Google Workspace for SSO logins and automated provisioning.
Track all user activity with ease
Use the activity log to see a full history of events, helping you meet compliance requirements and investigate incidents.
Offboard without losing access
When someone leaves, revoke their access in one click or transfer their credentials to another team member.
Why do teams choose NordPass?
You need a credential manager that will keep your business safe without slowing it down. NordPass combines strong security with an easy-to-use experience, so employees can quickly and securely access the tools they use every day.
Ease of use
Easy to admin
Multi-device sync
Ease of setup
Quality of support
FIDO2-compliant
The information is derived from data comparisons published by G2 on 06/07/24. Visit G2 website www.g2.com for more information.
Great password manager that could dominate all others
NordPass provides a mostly seamless experience for everyday use, drastically simplifying account creation and login processes. It's very easy to get started and to implement this within a business. Use within a browser makes this incredibly simple to integrate into existing workflows for all employees and individuals.
Jonathan B.
Mid-Market (51-1000 emp.)
Passwords made simple
The simplicity of the platform and having the ability to securely store all my password information in a single place. It was easy to use and the customer support I received when onboarding was great.
Verified User in Hospital & Health Care
Enterprise (> 1000 emp.)
Saved time and peace of mind
We've saved so much time.
Being able to onboard new team members and provide them with instant access to all of the accounts that they need, without needing to share sensitive information has been incredibly useful.
The random password generator has been critical for us to make sure that we aren't re-using passwords.
Dennis D
Small-Business (50 or fewer emp.)
Great password manager that could dominate all others
NordPass provides a mostly seamless experience for everyday use, drastically simplifying account creation and login processes. It's very easy to get started and to implement this within a business. Use within a browser makes this incredibly simple to integrate into existing workflows for all employees and individuals.
Jonathan B.
Mid-Market (51-1000 emp.)
ISO 27001 certified
SOC 2 Type 2 certified
Cure53
HIPAA