Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Meta
  3. Passkeys don't work on mobile / TOTP from password manager fails

Passkeys don't work on mobile / TOTP from password manager fails

Scheduled Pinned Locked Moved Meta
5 Posts 2 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • thisismissem@activitypub.spaceT This user is from outside of this forum
    thisismissem@activitypub.spaceT This user is from outside of this forum
    thisismissem@activitypub.space
    wrote on last edited by
    #1

    The flow for passkeys ends up blocking mobile browsers from authenticating if the passkey is stored in a tool like 1password, even if 2FA via TOTP is enabled.

    When trying to use 1password to fill a 2FA TOTP on mobile, the form field doesn't fill.

    I've not had this problem with 1password on any other site that I use, so it seems specific to something nodebb is doig.

    julian@activitypub.spaceJ thisismissem@activitypub.spaceT 2 Replies Last reply
    0
    • thisismissem@activitypub.spaceT thisismissem@activitypub.space

      The flow for passkeys ends up blocking mobile browsers from authenticating if the passkey is stored in a tool like 1password, even if 2FA via TOTP is enabled.

      When trying to use 1password to fill a 2FA TOTP on mobile, the form field doesn't fill.

      I've not had this problem with 1password on any other site that I use, so it seems specific to something nodebb is doig.

      julian@activitypub.spaceJ This user is from outside of this forum
      julian@activitypub.spaceJ This user is from outside of this forum
      julian@activitypub.space
      wrote on last edited by
      #2

      @thisismissem mm, I've only ever tested the 2factor plugin using a physical Yubikey, not a digital one.

      Is that what you're referring to, or did you mean a TOTP string?

      For those I only tested against Bitwarden, not 1Password.

      Were you able to register the token but not able to pass the screen when challenged?

      1 Reply Last reply
      0
      • thisismissem@activitypub.spaceT thisismissem@activitypub.space

        The flow for passkeys ends up blocking mobile browsers from authenticating if the passkey is stored in a tool like 1password, even if 2FA via TOTP is enabled.

        When trying to use 1password to fill a 2FA TOTP on mobile, the form field doesn't fill.

        I've not had this problem with 1password on any other site that I use, so it seems specific to something nodebb is doig.

        thisismissem@activitypub.spaceT This user is from outside of this forum
        thisismissem@activitypub.spaceT This user is from outside of this forum
        thisismissem@activitypub.space
        wrote on last edited by
        #3

        Yeah, but both, if I have a yubikey enabled, I can't use TOTP instead of yubikey from my tests.

        And yeah, I'm using a 1password passkey, instead of a yubikey — normally 1password handles those fine. On iOS Safari I received the system prompt, and it bypassed 1password completely.

        julian@activitypub.spaceJ 1 Reply Last reply
        0
        • thisismissem@activitypub.spaceT thisismissem@activitypub.space

          Yeah, but both, if I have a yubikey enabled, I can't use TOTP instead of yubikey from my tests.

          And yeah, I'm using a 1password passkey, instead of a yubikey — normally 1password handles those fine. On iOS Safari I received the system prompt, and it bypassed 1password completely.

          julian@activitypub.spaceJ This user is from outside of this forum
          julian@activitypub.spaceJ This user is from outside of this forum
          julian@activitypub.space
          wrote on last edited by
          #4

          @thisismissem okay, it sounds like there are two separate issues.

          I'll give my Yubikey a try again and see if I have issues getting a TOTP challenge.

          julian@activitypub.spaceJ 1 Reply Last reply
          0
          • julian@activitypub.spaceJ julian@activitypub.space

            @thisismissem okay, it sounds like there are two separate issues.

            I'll give my Yubikey a try again and see if I have issues getting a TOTP challenge.

            julian@activitypub.spaceJ This user is from outside of this forum
            julian@activitypub.spaceJ This user is from outside of this forum
            julian@activitypub.space
            wrote last edited by
            #5

            I released a new version of the 2factor plugin that supports multiple webauthn keys (so, Yubikey, Bitwarden, probably 1Password).

            Can you give it a try and let me know if you're still seeing 2FA issues?

            1 Reply Last reply
            2
            0
            • R relay@relay.mycrowd.ca shared this topic
              R relay@relay.an.exchange shared this topic
            Reply
            • Reply as topic
            Log in to reply
            • Oldest to Newest
            • Newest to Oldest
            • Most Votes


            • Login

            • Login or register to search.
            • First post
              Last post
            0
            • Categories
            • Recent
            • Tags
            • Popular
            • World
            • Users
            • Groups