Appearance
YubiKey compatibility with apps and devices
This article describes which YubiKey models are compatible with KeePassium on various Apple devices, and which other apps can open YubiKey-protected databases.
KeePass
YubiKey support in KeePass is not compatible with any other app. Use KeePassXC instead.
USB on iOS
iOS has limited support of USB devices. YubiKeys that support only USB (no NFC, no Lightning) won't work on iOS in the required challenge-response mode.
YubiKey models
YubiKey compatibility depends on key model, connection interface and device running KeePassium.
- Compatible YubiKey models:
- All 5 Series keys: 5Ci, 5 NFC, 5C NFC, 5 Nano, 5C Nano.
- All 4 Series keys: 4, 4C, 4 Nano, 4C Nano.
- Incompatible YubiKey models:
- YubiKey Security Key Series — no Challenge-Response functionality
- YubiKey Bio Series — no Challenge-Response functionality
However, not all compatible keys will work on every device.
Here is the summary of Apple devices that work with YubiKey in challenge-response mode.
| Lightning keys | NFC keys | USB keys | |
|---|---|---|---|
| YubiKey 5Ci | YubiKey 5 NFC, 5C NFC | YubiKey 5 Nano, 5C Nano | |
| iPhone with USB port | Full support (via Apple adapter) | App only + AutoFill workaround | Not supported |
| iPhone with Lightning port | Full support | App only + AutoFill workaround | Not supported |
| iPad with USB port | Full support (via Apple adapter) | Not supported | Not supported |
| iPad with Lightning port | Full support | Not supported | Not supported |
| Mac (native app) | App only + AutoFill workaround (via USB side of 5Ci) | Not supported | App only + AutoFill workaround |
| Mac (AppStore app) | Does not support YubiKey | ||
WARNING
The USB-C to Lightning adapter has to be made by Apple. During our tests in April 2024, cheaper adapters did not work.
macOS: App Store vs native app
If you install KeePassium on your Mac from the App Store, it is still the mobile app — your Mac pretends to be an iPad to run it. Unfortunately, iOS apps running on macOS cannot communicate with the YubiKey. To use YubiKey on macOS, you would need to install the native KeePassium for macOS (beta) from GitHub.
Other apps
KeePassium uses YubiKey in challenge-response mode. The implementation is compatible with KeePassXC and almost all other apps. The only exception is KeePass 2.x with its KeeChallenge plugin.
- KeePassXC (Windows, Linux, macOS): full compatibility
- Keepass2Android: full compatibility
- KeePassDX (Android): full compatibility
- Strongbox (macOS, iOS): full compatibility
- KeePass 2.x (with KeeChallenge plugin): not compatible
- Why you should avoid KeeChallenge for YubiKey support
- KeePass does not have any other suitable plugin. If you want to use YubiKey in a mobile app, the only desktop option is to replace KeePass with KeePassXC.