The Okta Verify mobile app is the preferred and recommended multi-factor authentication option as it provides the easiest and best experience in almost all cases; cellular service is not required. 

If you are unable to use the Okta Verify app, the Okta Hardware token is typically the next best option and provides the most consistent experience for users who need an alternative. 

The YubiKey 5C is available as an alternate authentication option for users who already use the Okta Verify mobile app. Because passkey functionality can require additional technical knowledge, the YubiKey 5C is recommended only for users who are comfortable troubleshooting technical issues.  U-M ITS only provides limited support for passkey functionality, consisting of this article and a Troubleshooting article.

The YubiKey 5C NFC USB-C  includes:

• Support for strong single factor two-factor hardware and multi-factor authentication

• Strong authentication with support for multiple protocols (Yubico OTP OATH HOTP OATH TOTP U2F PIV and Open PGP) and FIDO2 the new standard enabling the replacement of weak password-based authentication.

• Out of the box integration with hundreds of services with no shared secrets.

• User-Friendly

• Yubico offers a simple and convenient authentication with plug-and-play functionality, eliminating the need for passwords or complex setups. Log in up to 4X faster with YubiKey 5.

For those who cannot use the Okta Verify app, physical authenticator purchases are funded by Information and Technology Services (ITS).* The Okta Hardware Token is the recommended option for most users, though funded options include both the Okta Hardware Token and YubiKeys.

Simply add the authenticator of your choice to the cart and checkout; your initial purchase will be automatically charged to the ITS-funded program.

*Limit one funded hardware token per individual.