Yubico teams with HYPR and Nametag to integrate identity verification into passkey deployments

In a bid to reinforce the security lifecycle of hardware-based passkeys and reduce the risk of identity fraud, Yubico has entered new collaborations with identity-verification firms HYPR and Nametag. These partnerships signal a significant step in how the company is expanding its flagship YubiKey as a Service solution to integrate supply-chain trust of human identity with strong cryptographic authentication.

Under the new approach, organizations deploying Yubico’s passkey-based hardware security keys will be able to add an IDV step before credentials are issued or activated. As described by Yubico, the process anchors a known, verified person to the passkey credential, thereby shrinking the “trust gap” present in many remote-onboarding and digital-identity workflows.

Yubico characterizes this initiative as part of its “Bring Your Own IDV” (BYOIDV) strategy, which allows customers to select their preferred identity-verification provider and integrate that step into the pre-registration and lifecycle management of YubiKeys.

From a security perspective, the move responds to a mounting threat environment. Yubico notes that malicious actors increasingly exploit stolen identities, fake documents, and AI-driven impersonation to gain legitimate credentials and compromise corporate systems. By embedding IDV at onboarding, the company aims to ensure that the person receiving and activating the physical key is indeed the authorized user, according to the official press release.

The benefits the company highlights include:

HYPR CEO Bojan Simic described the integration as closing the loop between identity assurance and hardware keys.

“By integrating HYPR’s Zero Trust-enabling assurance framework directly into the YubiKey as a Service enrollment process, we guarantee that the industry’s strongest security key is bound to a verified user and a trusted device,” he wrote.

Nametag CEO Aaron Painter added that the partnership helps prove “the person receiving and setting up a YubiKey is not just a real person, but the right person.”

This development is timely, given the broader industry trend away from passwords and toward hardware-based passkeys and phishing-resistant authentication. Recent analysis shows that organizations increasingly view device-bound passkeys as a key element in securing access amid rising AI-enabled threats.

By combining identity verification at the start with passkey issuance and lifecycle management, Yubico is positioning itself to support organizations with distributed workforces, BYOD environments, and zero-trust architectures.

For cybersecurity and identity professionals, the message is clear: securing access doesn’t begin at login — it begins at identity issuance. By anchoring verified identity to hardware credentials, Yubico’s model attempts to pre-empt the path attackers might take — using stolen or faked identities to obtain legitimate credentials and exploit them.

Whether this model will scale smoothly across diverse regulatory environments and verification regimes remains to be seen, but the solution crafted by Yubico and its partners could certainly raise the bar.

Yubico’s new IDV-enabled passkey service underscores a broader shift in authentication: from securing “something you know” (passwords) toward verifying “someone you are” (identity) and “something you have” (hardware key).

For organizations seeking to reduce phishing, credential theft, and account takeover, this integrated approach may represent the next step in passwordless security.