cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Bozzie4
New member
Status: New idea

Firefox currently does not support Yubikey with PIN for WebAuthn on Linux nor Mac.

https://support.yubico.com/hc/en-us/articles/360016615020-Operating-system-and-web-browser-support-f...

This feature alone has made me switch to Chrome.  Without PIN support for Yubikey, there really is no point in supporting WebAuthn at all, in my opinion.

12 Comments
Status changed to: New idea
Jon
Community Manager
Community Manager

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.

fixcrypt
New member

We really needs it too here

Marcin57
New member

I can not log in to Outlook secured by Youbikey with pin and NFC.

The login window opens, the program asks to insert the key, but then nothing happens. The login process freezes, it does not even ask for the PIN.

Do something or I will have to quit Thunderbird and I wouldn't do that

JohnnyForensic
New member

Hard agree. If you've turned on Two-Factor Security with Keys for your iCloud account, every time you try to use "Log in with Apple," you're challenged for your security key. If it's PIN protected—which it should be—your login fails, so "Log in with Apple" is rendered useless.

Big thumbs-up to this request for Mac.

luciano198541
New member

Está faltando a configuração da chave Yubico.

Yubico key configuration is missing.

Jon
Community Manager
Community Manager

(Note: a similar idea has been merged into this thread)

ForestWalker
New member

Put it another way, without this feature, it rules out Firefox as a capable tool if pin based Yubikey is a requirement for an environment (eg corporate or other). So there will be waves of replacements of Firefox with alternative capable browsers as organizations align with best practices around MFA (especially since a swathe of recent hacks using MFA fatigue pushes organizations to choose stronger security measures like hardware tokens) and it will add to the rhetoric that Firefox just isn't a secure option vs competitors due to lack of security features, slow uptake of best practices, as more users see these features as necessary rather than nice-to-have.

cadawg
New member

Please see below.

cadawg
New member

Nevermind, this just started working on Arch when I installed libfido2 (make sure you're using firefox 114 :))

Foxite
New member

I have the opposite problem now. My yubikey doesn't have a pin configured. Now firefox demands one. Defaults didn't work, guessing at 1234 or 0000 didn't work, and somehow I had the same problem when I tried to change it. Now it's locked and I have to reset it, as well as all websites I'm using it with.

I guess this is a good time to configure a pin code, as per the other comments here.