Show HN: A virtual Yubikey device for 2FA/WebAuthN

Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN by nick__m on Saturday September 17, 2022 @07:44PM (#32882782)

I use 1Password and 2 Yubikey.

Both yubikeys are configured to enter the same impossible to memorize password on a press to unlock 1Password, hid mode is supported by every device with a USB ports.

I also use them as an otp second factor when a site requires it.

Finally, they are configured with a x509 certificate that I use as my ssh keys. I generate one key per devices that way the secret never leaves it and I require a pin to unlock the key. For convenience, I use an ssh agent to cache the pin

I could also use them for pgp signature and encryption but I have no use case for that.

[ Parent | on HN ]

Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN by taubek on Sunday September 18, 2022 @01:57AM (#32884808)

How do you configure Yubikey to enter password for unlocking 1password? Is this a Yubikey feature or 1password feature? Does this also work with mobile devices (phones)?

[ Parent | on HN ]

Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN by loulouxiv on Sunday September 18, 2022 @04:09AM (#32885495)

That is the hid mode parent is mentionning. With ykman you can configure the Yubikey to simulate being a USB keyboard (Human Interface Device) and then "type" a static password. The default setting is to type a Yubico specific OTP that can be checked by calling an API. The issue with the static password is that anybody getting near the yubikey with a device having a USB port can steal the password in seconds.

[ Parent | on HN ]

Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN by sig-io on Sunday September 18, 2022 @08:34AM (#32887014)

And any accidental button-press while in a chat-app or website will leak your password. I've seen many yubikey otp's accidentally pasted into irc, if you set it to password, you just posted that. I'd never recommend using that mode.

[ Parent | on HN ]

Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN by nick__m on Monday September 19, 2022 @08:09PM (#32905905)

Never happened to me since I use the slot 2 and it requires a long press.

[ Parent | on HN ]

Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN by taubek on Sunday September 18, 2022 @07:32AM (#32886621)

Thank you for explanation! I wasn't aware of this feature.

[ Parent | on HN ]

Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN by mandrizzle on Wednesday September 21, 2022 @10:01PM (#32934025)

You also risk locking yourself out of your life with a setup like that

[ Parent | on HN ]

Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN by turdnagel on Saturday September 17, 2022 @11:46PM (#32884230)

Can you use the Yubikey as a keyboard on iOS?

[ Parent | on HN ]

Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN by InvaderFizz on Sunday September 18, 2022 @12:39AM (#32884478)

Not sure if this answers your question, but you can use a Yubikey for FIDO2 on iOS with any iOS device with a USB port, or use the camera connection kit to make one on a Lightning port device.

Source: I was curious, so I used a camera connection kit to login to Okta with a Yubikey as my MFA last month.

[ Parent | on HN ]

Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN by turdnagel on Monday September 19, 2022 @02:39PM (#32902153)

I was curious about the use case of using a YubiKey to unlock 1Password.

[ Parent | on HN ]

Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN by weichweich on Sunday September 18, 2022 @01:56AM (#32884803)

You can also use it with NFC.

[ Parent | on HN ]