question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

No attempt to use U2F Security Key

See original GitHub issue

I have a YubiKey U2F security key as my default MFA. aws-google-auth used to immediately use it when I logged in, but now it does not use it and instead prompts me to use a different MFA method.

This appears to be caused by a change with Google’s pages, but I do not fully understand how the U2F integration works. I can say when I look at the MFA challenge selector page given to aws-google-auth it says that the security key is “not supported on this device or browser”.

Update 1

On further investigation, it looks like U2F integration is switching to a JavaScript implementation. It may not be possible to support U2F without running JavaScript.

Issue Analytics

  • State:open
  • Created 3 years ago
  • Reactions:10
  • Comments:7 (2 by maintainers)

github_iconTop GitHub Comments

5reactions
cmfcruzcommented, Apr 19, 2021

Hi, any chance that volkangurel’s PR can get merged soon? I can confirm that this works as a good alternative for Yubikey users.

The user is asked to visit https://g.co/sc which gives them a one-time security code after verifying their Yubikey.

3reactions
andreasocommented, Jan 28, 2021

@stevemac007: If you would like a Yubikey we can ship you one free of charge.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Why aren't I automatically prompted to use my Security Key ...
Ensure your security key is selected from your list of devices. Next, select the Use Security Key button. Then, the “Use your Security...
Read more >
"Security Keys" option is not available while trying to set up ...
I am trying to secure access to my 1Password Families account by using a YubiKey. Following instructions available here:
Read more >
Use a security key for 2-Step Verification - Google Account Help
Security keys can be used with 2-Step Verification to help you keep hackers out of ... New registered keys no longer work on...
Read more >
Enabling a FIDO security key (console) - AWS Documentation
If your FIDO security key is lost, stolen, or not working, you can still sign in using another MFA device registered to the...
Read more >
No More Passwords - U2F Security Keys Explained - YouTube
U2F Security Keys are becoming very popular. and will be the future of a passwordless Internet. Google was able to eliminate phishing from ......
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found