yubikey support

[matjazantloga]

hi,

we want to integrate yubikey support into self hosted vaultwarden
i'm confused with what to enter here?
this should be general setup for all possible yubikey users i suppose
we are using google auth at the moment but would like to add yubikey support

thanks Matjaz

[BlackDex]

See
https://github.com/dani-garcia/vaultwarden/blob/65629a99f07ec399cd574a4f20b6e73c2ba8f2a3/.env.template#L438...L444

[matjazantloga]

thanks, i guess i also need to setup otp server ? hope not ... :)

[BlackDex]

If you follow the stuff in the comments like going to https://upgrade.yubico.com/getapikey/ it should work just fine.

[matjazantloga]

Yes, i did that , also got yubikey now confirmed as one of two steps logins

but with client it doesnt work, no matter which one i choose.
trying to figure it out.

[kpfleming]

Which clients have you tried? Some of them don't support Yubikey unless it is NFC-capable (the mobile clients, I believe).

[matjazantloga]

bitwarden desktop client for windows bitwarden edge plugin bitwarden ios client yubikey i have is nfc-capable br Matjaz

…

________________________________ From: Kevin P. Fleming ***@***.***> Sent: Tuesday, November 5, 2024 1:48 PM To: dani-garcia/vaultwarden ***@***.***> Cc: Matjaž Antloga - Ortoscale ***@***.***>; Author ***@***.***> Subject: Re: [dani-garcia/vaultwarden] yubikey support (Discussion #5091) Which clients have you tried? Some of them don't support Yubikey unless it is NFC-capable (the mobile clients, I believe). — Reply to this email directly, view it on GitHub<#5091 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AR5G3FNBPUDEX3ADJSGFCHDZ7C5BDAVCNFSM6AAAAABQCC33POVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTCMJVGQ2DKOI>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[matjazantloga]

this is from win edge browser plugin, when i try to use yubikey [cid:49ee2fff-28f8-4787-8360-5064480884f1] same with win desktop client [cid:fdf68230-c076-47a5-ab4d-de484b340e98] haven't tested iphone yet... i'm sure i'm doing sth wrong, just don't know what

…

________________________________ From: Matjaž Antloga - Ortoscale ***@***.***> Sent: Tuesday, November 5, 2024 2:04 PM To: dani-garcia/vaultwarden ***@***.***> Subject: Re: [dani-garcia/vaultwarden] yubikey support (Discussion #5091) bitwarden desktop client for windows bitwarden edge plugin bitwarden ios client yubikey i have is nfc-capable br Matjaz

________________________________ From: Kevin P. Fleming ***@***.***> Sent: Tuesday, November 5, 2024 1:48 PM To: dani-garcia/vaultwarden ***@***.***> Cc: Matjaž Antloga - Ortoscale ***@***.***>; Author ***@***.***> Subject: Re: [dani-garcia/vaultwarden] yubikey support (Discussion #5091) Which clients have you tried? Some of them don't support Yubikey unless it is NFC-capable (the mobile clients, I believe). — Reply to this email directly, view it on GitHub<#5091 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AR5G3FNBPUDEX3ADJSGFCHDZ7C5BDAVCNFSM6AAAAABQCC33POVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTCMJVGQ2DKOI>. You are receiving this because you authored the thread.

[BlackDex]

I would suggest to check the Bitwarden Documentation: https://bitwarden.com/help/setup-two-step-login/

[matjazantloga]

sorry for wasting your time... it's working, just tried in inprivate edge ... i simply forgot i was already "trusted"on machine and there was not need for second auth because of that. Best regards, s prijaznimi pozdravi Matjaž Antloga, Ortoscale d.o.o.

…

________________________________ From: Mathijs van Veluw ***@***.***> Sent: Tuesday, November 5, 2024 2:15 PM To: dani-garcia/vaultwarden ***@***.***> Cc: Matjaž Antloga - Ortoscale ***@***.***>; Author ***@***.***> Subject: Re: [dani-garcia/vaultwarden] yubikey support (Discussion #5091) I would suggest to check the Bitwarden Documentation: https://bitwarden.com/help/setup-two-step-login/ — Reply to this email directly, view it on GitHub<#5091 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AR5G3FPALLUU5EDXSAFSHJLZ7DAG5AVCNFSM6AAAAABQCC33POVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTCMJVGQ3TGNQ>. You are receiving this because you authored the thread.Message ID: ***@***.***>