Skip to main content

DEVELOPED BY

nordvpn logo

Use security keys for phishing-resistant MFA

Access the NordPass password manager with a YubiKey or any FIDO2-certified security key for added protection.

  • Works with YubiKey 5 Series and other FIDO-compliant security keys.

  • MFA enforced across your entire team.

  • Insert or tap the security key to log in.

NordPass login screen with email and password fields
forbes cnet techradar logos

Media presence around the world

g2-4_5-rating

Customers trust us

11M+

Users worldwide

11,500+

Companies trust us

Which MFA methods are phishing-resistant?

For MFA to really protect against phishing, attackers shouldn’t be able to trick you into handing over your second factor. Right now, security keys are the only MFA method that prevents that second factor from being accidentally shared.

Authentication methodIs it phishing-resistant?Why 
SMS or email codeNoCodes can be forwarded, intercepted, or entered into fake websites.
Authenticator app (TOTP)PartiallyCodes are typed in, which means they can still be captured by attackers.
Push approvalNoVulnerable to MFA fatigue and accidental approvals. 
Security key (YubiKey, FIDO2)YesRequires physical possession and is bound to the legitimate domain.

Why use a security key to access your vault?

A security key provides extra protection against account takeovers without adding extra hassle.

Keeps attackers out

Even if a threat actor has your login details, they can’t access your NordPass vault without the security key.

Highly resistant to phishing

Since a security key is a physical device, it can’t be digitally stolen. It also doesn’t generate any codes that attackers can trick users into sharing.

Easy for everyone to use

All you have to do to log in is insert or tap your security key. This means less time spent typing TOTP or SMS codes.

Which security keys work with NordPass?

NordPass supports U2F and FIDO2 keys certified by the FIDO Alliance. If your team already uses YubiKeys, they will work with NordPass right out of the box.

YubiKey security keys with USB-C, USB-A, and Lightning connectors
  • YubiKey 5 Series

  • YubiKey Bio Series

  • iePass FIDO K44

  • MultiPass FIDO K25

  • ePass FIDO NFC K9 and K35

  • BioPass FIDO K26 and K27

  • Other FIDO-certified keys

Become a NordPass user to get YubiKeys at 20% OFF

Start using our password manager today and get YubiKeys, including Series 5 and Bio models, at a lower price.

Hand holding two packaged YubiKey 5 NFC security keys

How to set up MFA with a security key

Adding security keys to NordPass takes just a few minutes, while admins can enforce their use across the entire organization at any time.

Multi-factor authentication setup with authenticator app and security key options

If you have a business account

  • Log in to your NordPass vault and open Settings.

  • Open the multi-factor authentication menu.

  • Click the Set Up button next to the Security keys option.

  • Verify your identity with the code sent to your email.

  • Insert or tap the security key when prompted.

  • Give the key a name so you can identify it later.

  • Add a second key as a backup (optional but recommended).

  • Download your backup codes and store them somewhere safe.

How to log in with a security key

  • Enter your NordPass Business password or use company SSO.

  • Insert or tap your security key.

  • Enter your master password or use biometrics if required.

Multi-factor authentication setup with authenticator app and security key options

Deploy it. Then, prove that it works.

NordPass gives admins the tools to require strong authentication and the records to demonstrate its effectiveness during an audit.

Require MFA across the entire organization

Make multi-factor authentication mandatory for every user so every account is protected by more than just a password.

Connect your identity provider

Integrate with Entra ID, Okta, MS ADFS, and Google Workspace for SSO logins and automated provisioning.

Track all user activity with ease

Use the activity log to see a full history of events, helping you meet compliance requirements and investigate incidents.

Offboard without losing access

When someone leaves, revoke their access in one click or transfer their credentials to another team member.

Ensure your business is always audit-ready

Stay compliant with the most common regulatory standards by enforcing secure logins, centralizing access controls, encrypting sensitive information, and generating clear audit trails.

Why do teams choose NordPass?

You need a credential manager that will keep your business safe without slowing it down. NordPass combines strong security with an easy-to-use experience, so employees can quickly and securely access the tools they use every day.

g2-4_5-rating

Security doesn't have to be complex

Ease of use

Easy to admin

Multi-device sync

Ease of setup

Quality of support

FIDO2-compliant

The information is derived from data comparisons published by G2 on 06/07/24. Visit G2 website www.g2.com for more information.

g2 5 stars

Great password manager that could dominate all others

NordPass provides a mostly seamless experience for everyday use, drastically simplifying account creation and login processes. It's very easy to get started and to implement this within a business. Use within a browser makes this incredibly simple to integrate into existing workflows for all employees and individuals.

Jonathan B.

Mid-Market (51-1000 emp.)

sertica iso certificate

ISO 27001 certified

soc2type2 badge

SOC 2 Type 2 certified

cure53 logo

Cure53

hipaa compliant badge

HIPAA

Frequently asked questions