No attempt to use U2F Security Key
See original GitHub issueI have a YubiKey U2F security key as my default MFA. aws-google-auth
used to immediately use it when I logged in, but now it does not use it and instead prompts me to use a different MFA method.
This appears to be caused by a change with Google’s pages, but I do not fully understand how the U2F integration works. I can say when I look at the MFA challenge selector page given to aws-google-auth
it says that the security key is “not supported on this device or browser”.
Update 1
On further investigation, it looks like U2F integration is switching to a JavaScript implementation. It may not be possible to support U2F without running JavaScript.
Issue Analytics
- State:
- Created 3 years ago
- Reactions:10
- Comments:7 (2 by maintainers)
Top Results From Across the Web
Why aren't I automatically prompted to use my Security Key ...
Ensure your security key is selected from your list of devices. Next, select the Use Security Key button. Then, the “Use your Security...
Read more >"Security Keys" option is not available while trying to set up ...
I am trying to secure access to my 1Password Families account by using a YubiKey. Following instructions available here:
Read more >Use a security key for 2-Step Verification - Google Account Help
Security keys can be used with 2-Step Verification to help you keep hackers out of ... New registered keys no longer work on...
Read more >Enabling a FIDO security key (console) - AWS Documentation
If your FIDO security key is lost, stolen, or not working, you can still sign in using another MFA device registered to the...
Read more >No More Passwords - U2F Security Keys Explained - YouTube
U2F Security Keys are becoming very popular. and will be the future of a passwordless Internet. Google was able to eliminate phishing from ......
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Hi, any chance that volkangurel’s PR can get merged soon? I can confirm that this works as a good alternative for Yubikey users.
The user is asked to visit https://g.co/sc which gives them a one-time security code after verifying their Yubikey.
@stevemac007: If you would like a Yubikey we can ship you one free of charge.