However for other services like Facebook, 1Password, etc that allow Yubikey as a 2FA method, you can use a phone as an alternative. I had thought they would allow Yubikey for 2FA, but it's really to go fully passwordless, and maybe for whatever reason phones aren't supported yet. That may be why it's erroring out for me trying to setup a Pixel. So while I don't use Chrome generally, at least having my phone be a possible device I can use if I forget my Yubikey is an awesome backup.Įdit: Microsoft's hardware token use seems to be for passwordless logins.
This can be useful because while it's very easy to lose a Yubikey or forget to bring one, a phone is the device you have on you ALL the time. I went to try a few more accounts and they all worked, so now not only do I have Yubikeys added, I have my phone added.
I cannot find a single article that even talks about using your phone as a U2F key. I immediately tried searching online for articles about this and unfortunately all I can find are articles talking about securing your Google account with a hardware key. This somehow errored out when I tried to setup my Pixel 6 Pro for Microsoft, but I tried adding Yubikeys to 1Password too, and it successfully allowed me to setup my Pixel 6 (in addition to my Yubikeys). I'm guessing your phone and Chrome can communicate via BT to transmit U2F keys wirelessly. I tried Chrome as an alternative browser and before I plugged in my Yubikey, I noticed the prompt allowed me to use my phone potentially? This is basically the same way a Google account uses 2FA via Android security key. I've ditched Chrome a while ago, but decided to check it out again because somehow Firefox doesn't get detected as a compatible browser when setting up Yubikeys on my Microsoft account. However, recently due to the May 4th sale at Yubico, I picked up some new Yubikeys to bump up my 2FA security by using hardware tokens, and in setting them up, I learned that you might be able to do a bit more with your phone than simply secure a Google Account.
I've seen this as a feature for Pixel and Android phones for years now, but specifically, coverage of this has only been limited to Google Accounts.
0 kommentar(er)
