Collaborate Disseminate
Yubico PAM module requires one to specify the id(API client ID) parameter obtained from Yubico API key signup page. For example:
auth sufficient pam_yubico.so id=1234 authfile=/etc/yubikey_mappings urllist=https://api.yubico.com/wsapi/2.0/… Continue reading What is the purpose of Yubico API client ID?
I am quite new to this universe of Yubikey in general and really starting to use them and get into it only now, so please, bare with me.
I noticed that it is now possible to login to github without having to put a combination of username+p… Continue reading Yubikey 5 NFC, passkey and Android [closed]
YubiKey security keys can be cloned via a side-channel attack that leverages a vulnerability in a cryptographic library.
The post Crypto Vulnerability Allows Cloning of YubiKey Security Keys appeared first on SecurityWeek.
Continue reading Crypto Vulnerability Allows Cloning of YubiKey Security Keys
Is there a way to use the Security Key C NFC (not to confuse with other yubico keys) to login on windows? Yubico states that it is not possible. My many onlineservices are compatible with my key and even mac os. When entering the yubikey m… Continue reading Login to Windows using the Yubico Security Key C NFC [migrated]
I created three gpg subkeys stored on my YubiKey as described here. I added enable-ssh-support and enable-putty-support to my gpg-agent.conf file. Everything works when accessing a server with the ssh-key generated by gpg –export-ssh-key … Continue reading Windows YubiKey GPG works with putty but not terminal [migrated]
Whatsapp is rolling out passkeys. I don’t think backing up passkeys in a password manager is a good idea. I’d like to have device bound passkeys but they only allow me to create one. How should I be able to have it in different devices for… Continue reading Why whatsapp only let you create 1 passkey?
From the documentation of Yubikey and passkeys, I got the impression that the passkey implementation is based on FIDO2, because they say the limit is 25 keys:
Currently, YubiKeys can store a maximum of 25 passkeys.
FIDO2 – the YubiKey 5 c… Continue reading Some questions on Yubikey, FIDO2, and passkeys
I just started using a Yubikey 5. I’ve set up GPG according to this excellent guide, and now I have 3 working ECC key pairs on my Yubikey: Sign/S :: ed25519, Encrypt/E :: cv25519, Authentication/A :: ed25519.
Now I want to use my Yubikey t… Continue reading Certify using Yubikey
I’m looking into potentially acquiring one or two Yubikeys for additional security around the web. Looking at a Yubikey like below, I can’t help but think that these things are fragile and might end up physically damaged quite quickly, esp… Continue reading Physically speaking, how durable are Yubikeys? [closed]
It is typically recommended to enable 2FA wherever possible. Moreover, it is typically recommended to enable not just any 2FA method, but Yubikeys in particular.
Yubikeys are considered to be the strongest available 2FA method. They are ni… Continue reading How do Yubikeys improve security if I am typically also forced to enable other, weaker 2FA methods?