Yubico extends hardware-backed passkeys beyond logins into signatures
Yubico announced the general availability of YubiKey 5.8 on 21 July 2026, extending the hardware key beyond login authentication into digital signatures, identity wallets, payments and AI-driven approval workflows.
On 21 July 2026, the company published the release from Stockholm, Santa Clara, California, and Singapore under the Nasdaq Stockholm ticker YUBICO.
YubiKey 5.8 expands the role of a passkey from proving who logs in to helping verify what a user or autonomous AI agent can do.
According to Yubico, the firmware provides a hardware-backed base for document signing, enterprise credential management and human-in-the-loop validation workflows.
As generative and agentic AI drive faster automated cyberattacks, Yubico argues that traditional multi-factor authentication no longer covers the full risk.
Albert Biketi, Yubico’s chief product and technology officer, said YubiKey 5.8 extends phishing resistance from authentication into workflow actions.
CTAP 2.3 and WebAuthn support
The firmware adds support for the CTAP 2.3 standard and preview support for the emerging WebAuthn signing extension.
Developers can use those standards and APIs to build privacy-preserving workflows without expensive backend key management systems or custom cryptographic infrastructure.
As a result, teams can test, design and deploy high-assurance signing features earlier in web applications, digital wallets and AI-driven approval systems.
Yubico also says the update supports secure enterprise workflows across identity wallets, document signing and AI-driven approvals.
Meanwhile, YubiKey 5.8 expands Enterprise Attestation support to 16 Relying Party IDs on a single key for larger organisations.
Other additions include support for verifiable credentials with privacy-enabling algorithms and Secure Payment Confirmation.
The release also adds persistent PIN and user-verification auth tokens, which can reduce repeated PIN prompts and support more autofill use cases.
Credential discovery now appears alongside software passkeys, a design change that Yubico says can reduce enrolment confusion and lower helpdesk costs.
Biketi said, “In an era where AI agents execute high-consequence business workflows, organisations must enable dynamic verification of human intent.”
He also said YubiKey 5.8 brings hardware-backed phishing resistance into digital signatures, enterprise credential management and validation workflows without costly custom cryptographic rollouts.
Yubico said the firmware keeps all capabilities available in YubiKey 5.7.4 and is shipping across major YubiKey product lines.
However, the YubiKey FIPS Series and the YubiKey CCN Series remain on version 5.7.4 rather than moving to YubiKey 5.8.
