Questions tagged [fido2]
The fido2 tag has no usage guidance.
14
questions
1
vote
0
answers
45
views
Windows 11 2FA prompt opens a console instead of a GUI window
Some time ago, I started using FIDO2 keys (Yubikey 5 NFC, to be precise) as a form of second-factor authentication on a few sites that support it.
However, after some change in my system, most likely ...
- 401
1
vote
1
answer
61
views
How to interact with FIDO authenticaor (*user presence check*) from Windows Service?
I have a setup with several on-demand SSH tunnels that I like to manage via Windows Services. I normally use Cygwin with its own OpenSSH (OpenSSH_9.5p1, OpenSSL 3.0.12 24 Oct 2023), but have also ...
- 257
0
votes
0
answers
35
views
Cache FIDO2 security PIN for a few hours
How to configure Windows to remember my Security Key PIN for a few hours? I've just checked: logged in to the same site twice in incognito mode within 1 minute and I was asked for the PIN twice.
_
- 514
0
votes
0
answers
71
views
No passkey icon option on Windows 10
I am trying to enable passkey login on Windows 10 devices.
I have enabled UseSecurityKeyForSignin and EnableFIDODeviceLogon as well as enabled WHfB in gpedit.msc According to RSOP, passkey login is ...
- 1
0
votes
1
answer
379
views
What are the risks of using a FIDO U2F USB key like Google's Titan with a hacked computer? [closed]
What are the risks of sticking a FIDO U2F USB key like Google's Titan into a computer that is hacked?
The hacking I am thinking about is unauthorized access and control over an operating system. In ...
- 119
1
vote
0
answers
546
views
Can I use an iPhone connected via USB to a computer as a FIDO2 security key (for example in OpenSSH)?
In the same way that I can use a Yubikey or any other FIDO2 hardware key to store resident keys for use with OpenSSH (for example ssh-keygen -t ed25519-sk -O resident -O verify-required) I would like ...
- 111
3
votes
0
answers
471
views
Is it possible to disable Windows Hello trying to be my FIDO2 credential?
Sometimes when I try to register using FIDO2, windows asks me for my Windows Hello PIN so that it can authenticate me.
Windows Hello asking for a PIN:
AFAIK this is windows offering to be a "...
- 39
0
votes
0
answers
219
views
Why does Windows *require* User Verification when registering WebAuthn?
During WebAuthn registration in Windows, why does Windows require User Verification, even when the Relying Party does not specify the User Verification requirement, or specifies it as preferred? Is it ...
2
votes
3
answers
5k
views
Force Use of Hardware Security Key with a Windows Hello Account
Question:
Is it possible to bypass Windows Hello (Pin) on a Windows 11 login tied tied to a Microsoft passwordless account? Why? Want to force use of a hardware security key for authentication.
I ...
2
votes
1
answer
237
views
Can a website detect if the same physical FIDO key is used for multiple accounts?
If I have an account, say with google, and only use that account from location A, using device A, and another google account only used with device B in location B, if I used the same 2fa FIDO key for ...
- 21
1
vote
0
answers
748
views
Error when register Yubikey Bio with website
I am having an issue registering a yubikey bio with a website. I have managed to register a Yubikey 5 series with the website without issue however when I try with the Yubikey bio I get an error like ...
- 143
1
vote
1
answer
457
views
What is the cryptographic relationship between an ssh key and my Yubikey?
I am curious what is the cryptographic relationship between the generated ssh private (and public) key when I use my Yubikey to add an extra layer of protection.
Does ssh-keygen write anything into ...
- 132
0
votes
2
answers
2k
views
Windows is asking for a PIN when I use FIDO device
When I try to use my Yubico 5 NFC FIDO key to authenticate on any portal, Windows opens a Windows Security dialog asking for a PIN. I don't remember having created a PIN.
I can't find it when trying ...
- 307
0
votes
0
answers
1k
views
FIDO2 Security Key login annoyance with Windows 10/11 and Azure AD
I've a few Windows 10 and Windows 11 machines that are, like I/my account is, joined my Azure AD and I use my FIDO2 keys (Yubikey Bio and also Kensington Verimark Guards) to log in BUT I have noticed ...
- 1,153