5 ms·
I use 1Password and 2 Yubikey. Both yubikeys are configured to enter the same impossible to memorize password on a press to unlock 1Password, hid mode is suppo
by nick__m 4y ago
I use 1Password and 2 Yubikey.
Both yubikeys are configured to enter the same impossible to memorize password on a press to unlock 1Password, hid mode is supported by every device with a USB ports.
I also use them as an otp second factor when a site requires it.
Finally, they are configured with a x509 certificate that I use as my ssh keys. I generate one key per devices that way the secret never leaves it and I require a pin to unlock the key. For convenience, I use an ssh agent to cache the pin
I could also use them for pgp signature and encryption but I have no use case for that.
- taubek 4y agoHow do you configure Yubikey to enter password for unlocking 1password? Is this a Yubikey feature or 1password feature? Does this also work with mobile devices (phones)?
- loulouxiv 4y agoThat is the hid mode parent is mentionning. With ykman you can configure the Yubikey to simulate being a USB keyboard (Human Interface Device) and then "type" a static password. The default setting is to type a Yubico specific OTP that can be checked by calling an API. The issue with the static password is that anybody getting near the yubikey with a device having a USB port can steal the password in seconds.
- taubek 4y agoThank you for explanation! I wasn't aware of this feature.
- sig-io 4y agoAnd any accidental button-press while in a chat-app or website will leak your password. I've seen many yubikey otp's accidentally pasted into irc, if you set it to password, you just posted that. I'd never recommend using that mode.
- nick__m 4y agoNever happened to me since I use the slot 2 and it requires a long press.
- turdnagel 4y agoCan you use the Yubikey as a keyboard on iOS?
- InvaderFizz 4y agoNot sure if this answers your question, but you can use a Yubikey for FIDO2 on iOS with any iOS device with a USB port, or use the camera connection kit to make one on a Lightning port device. Source: I was curious, so I used a camera connection kit to login to Okta with a Yubikey as my MFA last month.
- weichweich 4y agoYou can also use it with NFC.
- turdnagel 4y agoI was curious about the use case of using a YubiKey to unlock 1Password.
- deleted 4y ago[deleted]
- mandrizzle 4y agoYou also risk locking yourself out of your life with a setup like that