YubiKey 5.8 extends passkeys from secure authentication to verifiable authorization

Yubico has officially released YubiKey 5.8, marking an expansion of the role of the passkey from secure authentication to include hardware-backed, verifiable authorization for digital actions. This release also brings full support for the CTAP 2.3 standard and preview support for the emerging WebAuthn signing extension, providing developers with modern standards to implement secure workflows. These enhancements address complex enterprise environments by delivering hardware-backed digital signatures and enabling use cases such as document signing, identity wallets, workflow approvals, and other high-assurance transactions via standardized APIs.

Following these advances, YubiKey 5.8 increases scalability and privacy with expanded Enterprise Attestation, allowing a single device to maintain up to 16 unique Relying Party IDs across multiple environments and providers while preserving user privacy. The update also extends support for new digital identity initiatives, including digital identity wallets, verifiable credentials with privacy-focused algorithms, and Secure Payment Confirmation for web-based payment workflows.

Building on this technical foundation, persistent personal identification number and user verification tokens now allow for more seamless credential discovery, increased autofill capabilities, and fewer prompt interruptions. Additionally, enhanced credential discovery and autofill-like features lower IT management costs and encourage broader adoption of phishing-resistant passkeys. YubiKey 5.8 is now available across all major YubiKey product lines.