I'm still reading some inconclusive things, on potentially needing some other authentication method.
I read an older post stating you used to need to run Yubico authenticator as an adminstrator, to alter passkeys/pins, but that has been updated and is now not necessary? Secondly, i know if a credential is non discoverable, it won't list in the passkey section of yubico authenticator, but is there any other dead give away, you have a non discoverable credential on the yubikey? thank you
If i'm in chrome and link a site to the authenticator in the apple password app, will logging into that same site on safari work, and vice versa? Thank you
If you set up a windows hello device based passkey for a microsoft account, can you later set up another windows hello passkey from the same device, that would be backed up in microsoft password manager, for the same microsoft account? For instance a deviced based fingerprint, and a cloud based fingerprint for passkey two, both windows hello
I had assumed any passkey that you created would be listed in the passkey section in yubico authenticator, but now have learned about the discoverable/ non discoverable pairings. Do most large websites lean towards non discoverable, and if i would prefer to always be able to see a passkey in authenticator, is there a way to force discoverable? Also, is it preferable to set the fido2 pin in yubico authenticator, vs using a new key on a site, and the site prompting you to enter a first time pin? Thank you
If i'm understanding things correctly, if you didn't have 2fa set up, and were trying to set up a passkey on a new device, you would potentially default to just receiving an email code, which seems less secure than traditional sms. If you have sms set up, you would also default back to this, when setting up the passkeys for the first time. I know stopping phishing is an objective benefit, but otherwise i'm not seeing how it's in any way more secure, when setting up new devices. thanks for any thoughts
First off, you only set one fido2 passkey pin per yubikey, that will work on various third party sites? Secondly, i watched a video where the guy had a passkey pin set, inserted the key, entered the pin, and then still had to enter a otp code? I thought only the physical key, and passkey pin are necessary?
Thirdly, do all yubikeys work equally as well in yubico authenticator on MacOs vs windows? There is an old post here mentioning Yubikey 5 nfcs not working physically on MacOs. Also there is mention of needing to allow your keyboard to be monitored using Yubico authenticator on MacOs, but someone said to configure passkeys/factory reset keys, you don't need to allow this? Thanks for any thoughts.
If i had a windows hello fingerprint passkey as my only sign in option, how would i sign into a new computer for the first time?
For instance, if you registered the key years ago when the website defaulted to u2f, but now has fido 2 as an option, and i wanted to reregister the key as Fido 2? Also, do all Yubikey 5 nfc's support fido 2, even if they are five years oldish? Thank you
I'm trying to add the key through a security key option on a website. I am being prompted to create a pin. At this point i have not downloaded the authenticator app, and created a fido 2 pin. If i enter a pin via the website is this what i'm doing, in a different way, or would this just be a pin specific to that singular website? thank you for any guidance.