Yubico has released YubiKey 5.8, expanding the capabilities of passkeys beyond secure authentication to verifiable, hardware-backed authorization. This new firmware supports enterprise workflows in identity wallets, document signing, and AI-driven approvals, while also equipping developers to build next-generation security features.

As AI advances drive sophisticated cyberattacks, traditional multi-factor authentication struggles to keep pace. YubiKey 5.8 addresses the need for enterprises to secure not only logins but also specific user or AI agent actions. It builds on YubiKey's phishing resistance by providing a secure, hardware-backed foundation for digital actions in the AI era.

Albert Biketi, Yubico's chief product and technology officer, highlighted that YubiKey 5.8 brings phishing resistance into workflows, enabling dynamic verification of human intent for AI agents executing business tasks. The firmware simplifies integration through standards like CT AP 2.3 and preview support for Web Authn signing extensions, reducing the need for costly custom infrastructure. It enhances developer integration, user experience with expanded Enterprise Attestation, and supports emerging initiatives like digital identity wallets and Secure Payment Confirmation.

Leif Johansson, executive director at SIROS Foundation, called the signing capabilities a "game changer" for digital identity, enabling new applications without platform lock-in. YubiKey 5.8 is now shipping across YubiKey product lineups, supporting all features of 5.7.4 and enhancing enterprise passkey use cases. The YubiKey FIPS and CCN Series will continue on firmware 5.7.4 for regulatory alignment and re-certification.