Install ykman with Homebrew

Project links

• Homepage
• Repository
• Upstream docs
• Package manager page

Commands and aliases

• ykman

Project history

The GitHub repository for yubikey-manager was created on 2016-07-04, after Yubico already had older, narrower tools for OTP personalization and related YubiKey tasks. The project consolidated YubiKey administration into a Python CLI/library that can talk to a YubiKey over the relevant USB interfaces instead of being limited to the original OTP personalization workflow.

Yubico's current developer page describes YubiKey Manager CLI as a Python 3.10-or-later library and command-line tool for configuring a YubiKey, and points GUI users to Yubico Authenticator. The separate user guide describes it as an advanced cross-platform tool and the premier CLI for advanced management of YubiKey applications.

Adoption history

`ykman` became the practical successor for day-to-day YubiKey configuration as YubiKeys expanded beyond OTP into FIDO2/WebAuthn, PIV smart-card certificates, OATH credentials, OpenPGP, and other applets. Its Homebrew, MacPorts, pip/pipx/uv, Windows installer, Linux package, and FreeBSD port paths reflect a tool meant for developers, admins, and security teams rather than only one operating system.

In the YubiKey ecosystem, adoption is also explained by deprecation pressure: Yubico has announced end-of-life dates for the older YubiKey Personalization package, while YubiKey Manager continues to track newer firmware and application capabilities.

How it is used

Typical usage starts with `ykman list` or `ykman info`, then moves into application-specific subcommands such as `ykman fido`, `ykman oath`, `ykman openpgp`, `ykman otp`, and `ykman piv`. It is used to inspect tokens, configure applications, manage credentials or certificates, reset applets, and script YubiKey fleet setup from a terminal.

Package users should think of `ykman` as hardware administration tooling, not a passive client: commands can change security-sensitive state on a physical token, and some platforms require USB HID, smart-card, or input-monitoring permissions for particular YubiKey interfaces.

Why package nerds care

`ykman` is package-nerd significant because it is where modern hardware-token support becomes ordinary package-manager plumbing: a Python CLI, platform-specific USB and smart-card access, shell completion, native installers, and OS packages all wrap one small executable that configures real cryptographic hardware.

It also shows the maintenance arc of security-device tooling. Old single-purpose C utilities remain historically important, but the package that users now expect to install is the cross-application manager that follows current firmware and authentication standards.

Timeline

• 2016-07-04: Yubico creates the yubikey-manager GitHub repository.
• 2020s: YubiKey Manager CLI becomes Yubico's documented advanced cross-platform CLI for current YubiKey applications.
• 2025-02-19: Yubico announces end of life for the older YubiKey Personalization package, strengthening `ykman` as the maintained path for newer YubiKey management.
• 2026: Yubico documentation describes ykman as supporting features of current YubiKey firmware and applications including FIDO2, PIV, OTP, OpenPGP, OATH, Security Domain, and YubiHSM Auth.

Related projects

• YubiKey Personalization / ykpers is the older OTP-focused personalization library and CLI.
• Yubico Authenticator is Yubico's GUI-oriented application for users who do not want the CLI.
• Related Yubico tools and protocols include yubico-c, libfido2, python-fido2, PIV, OpenPGP, OATH, YubiOTP, FIDO2, and WebAuthn.

Sources

• https://api.github.com/repos/Yubico/yubikey-manager
• https://developers.yubico.com/yubikey-manager/
• https://developers.yubico.com/yubikey-personalization/
• https://docs.yubico.com/software/yubikey/tools/ykman/intro.html
• https://github.com/Yubico/yubikey-manager