Dashlane + Yubico: Shaping the Passwordless Future with Security Keys

Published:
Dashlane + Yubico: Shaping the Passwordless Future with Security Keys
Dashlane is partnering with Yubico to become the first password manager that enables passwordless login using a YubiKey as your main authentication factor.

Dashlane is thrilled to partner with Yubico, a global leader in hardware authentication. Today, we’ve become the first password manager to go passwordless, enabling users to log in using a FIDO2-compatible security key—like a YubiKey—as their primary authentication method.

Now, with one tap on your YubiKey, you can log into Dashlane—no Master Password required.

Dashlane is able to provide enhanced vault security with industry standards of WebAuthn PRF, taking one more step toward our vision of a truly passwordless future as part of our continued commitment to delivering security-first innovation that makes authentication both simpler and safer.

New consumer users can start logging in with a FIDO2-compatible security key on desktop browsers today. In the future, we plan to expand this innovation to all users and devices.

The problem with Master Passwords

Most password managers today rely on a “master password” to encrypt the data stored in the vault. Ideally, this master password must be complex, unique, and memorable, and it needs to be entered every time you unlock your password manager—potentially several times a day.

If it’s ever exposed through a phishing attack or data breach, all of your stored credentials could be at risk.

How security keys are the ultimate defense

Experience the ultimate account security. By using a FIDO2 security key, you get fast, passwordless access to your Dashlane vault with phishing-resistant, hardware-based protection.

Here’s why this matters:

  • Phishing-resistant vault security: Your access to Dashlane cannot be phished because you’re never typing or sharing a secret (like a master password) that could be stolen.
  • User control: Security keys only activate with your explicit consent by requiring a deliberate physical action, such as touching the key, entering a PIN, or using your fingerprint to approve the request.

When you replace your master password with a security key, you ensure your passwords remain truly yours.

What’s new in this launch

Today’s milestone builds on our early access launch in late June, which gave us invaluable feedback that has shaped this release.

Now, we’re expanding upon our early access by adding:

  • Multi-key support: Register multiple security keys, so you always have a backup option in case one is lost or unavailable.
  • Passkey user verification support on the web: Enjoy frictionless, passwordless login directly in your browser.
  • Early access for company admins: If you’re a new primary admin on a Business or Omnix plan, you can try out the phishing-resistant authentication today.

These updates make it easier for both individuals and businesses to embrace hardware-backed protection in their daily workflows, combining hassle-free passwordless authentication with the ultimate privacy protection.

Getting started with security keys

Using a security key is simple. Here’s how. 

  1. When creating an account, select the "Use a security key" option.
A screenshot of the Dashlane credential manager desktop extension shows a new user being prompted with “How would you like to secure your account?” There are 3 options: 1) Create a Master Password, 2) Create a passwordless account, and 3) Use a security key.
  1. Follow the instructions from the OS/browser to use your security key.
A screenshot of the Dashlane credential manager desktop extension shows a pop-up that says “PIN required” with a field to enter a PIN. Behind the pop-up is the prompt “How would you like to secure your account?” There are 3 options given: 1) Create a Master Password, 2) Create a passwordless account, and 3) Use a security key.

Plus, managing the security keys you use with Dashlane is simple and intuitive. You can give each key a custom name and easily delete keys whenever you want.

A screenshot of a security key stored in Dashlane shows an editable field for the key name, plus fields for model, certification, and when the key was added, with a “Save changes” and “Delete key” button at the bottom.

Diving deeper into how to get started

loading...

Looking ahead to the passwordless future

On the horizon, we’re working to expand phishing-resistant login to mobile devices, bringing the benefits of security keys beyond the desktop.

For now, this advanced login method has some limitations because its support depends on specific technical capabilities (WebAuthn PRF), causing compatibility to vary by device and ecosystem. 

We’re also evolving how businesses and individuals adopt this technology:

  • Businesses: We’re expanding support to give all admins, not just the primary admin, the tools to secure access to Dashlane with hardware-backed authentication, which combines unphishable security with a simpler login experience.
  • Individuals: We’re building a migration path so Dashlane customers with master password accounts can seamlessly transition to security key–based accounts.

By eliminating the risks of master passwords, we’re setting a new security standard for individuals and organizations alike that’s user-friendly and future-proof. Learn more about the feature in our Help Center.

Sign up to receive news and updates about Dashlane