Menu

#531 Android Yubikey issue

v1.0_(example)
open
nobody
yubikey (3)
1
2024-09-04
2021-02-28
Dirk
No

Hi

I have been using Password Safe for years and believe it is still the best. Thank you.

I recently acquired a yubikey 5 series. So I have got it working perfectly on the desktop. Plugged into my phone it fills the password textbox every time i touch the key. I believe I am doing the correct procedure.

Toggle yubikey, press open, and then the timer starts for physical touch on the yubikey. If I touch the key, the password field just populates with random characters.

Not sure if it is because the 5 series yubikey is not supported or if I am being the idiot.

Thanks
Dirk

Discussion

  • Rony Shapiro

    Rony Shapiro - 2021-02-28

    What phone? iOS? Android?
    These are maintained by other programmers.

     
  • Dirk

    Dirk - 2021-02-28

    Hi apologies

    Galaxy S20 android.

     
  • John Doe

    John Doe - 2024-09-04

    The procedure you are describing seems to be correct as long as you don't have a masterpassword on the psafe3-file.

    Two ideas:
    1) If your Yubikey has nfc - have you tried it that way instead of connecting it to the USB-port?
    2) I would set a masterpassword to the database an check if it works then?

    Setting a masterpassword seems to be a bit more secure instead of using only the Yubikey. Someone who has access to your Yubikey and your psafe3-File needs no knowledge to open the database (no knowledge is needed). In fact the Yubikey is not a second factor in such a scenario anymore. Just as an aspect you might think about.

    If you have a password it is:
    1. Toggle Yubikey
    2. Enter your password
    3. Press Open-Button
    4. The countdown starts and you touch the Yubikey
    5. Password-file will be opened.

    I have a YK5nfc with USB-A and use the nfc option on my phones together with a password which is working in Android. With nfc you dont need to touch the sensor you just have to present it to the phones backside during the countdown. If that works, you will not see any characters (or placeholders for them) entered anywhere. That's why I would give it a try with a password (you can copy the psafe3-File for testing so you will not bring your productive psafe3 into danger (which you will have backuped for sure ;-))

    Oh, 2021 - I just recognized it too late

     

    Last edit: John Doe 2024-09-04

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.