Support Yubikey with PIN in Firefox for Linux and Mac

[Bozzie4]

Firefox currently does not support Yubikey with PIN for WebAuthn on Linux nor Mac.

https://support.yubico.com/hc/en-us/articles/360016615020-Operating-system-and-web-browser-support-f...

This feature alone has made me switch to Chrome.  Without PIN support for Yubikey, there really is no point in supporting WebAuthn at all, in my opinion.

[Jon]

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.

[fixcrypt]

We really needs it too here

[Marcin57]

I can not log in to Outlook secured by Youbikey with pin and NFC.

The login window opens, the program asks to insert the key, but then nothing happens. The login process freezes, it does not even ask for the PIN.

Do something or I will have to quit Thunderbird and I wouldn't do that

[JohnnyForensic]

Hard agree. If you've turned on Two-Factor Security with Keys for your iCloud account, every time you try to use "Log in with Apple," you're challenged for your security key. If it's PIN protected—which it should be—your login fails, so "Log in with Apple" is rendered useless.

Big thumbs-up to this request for Mac.

[luciano198541]

Está faltando a configuração da chave Yubico.

Yubico key configuration is missing.

[Jon]

(Note: a similar idea has been merged into this thread)

[ForestWalker]

Put it another way, without this feature, it rules out Firefox as a capable tool if pin based Yubikey is a requirement for an environment (eg corporate or other). So there will be waves of replacements of Firefox with alternative capable browsers as organizations align with best practices around MFA (especially since a swathe of recent hacks using MFA fatigue pushes organizations to choose stronger security measures like hardware tokens) and it will add to the rhetoric that Firefox just isn't a secure option vs competitors due to lack of security features, slow uptake of best practices, as more users see these features as necessary rather than nice-to-have.

[cadawg]

Please see below.

[cadawg]

Nevermind, this just started working on Arch when I installed libfido2 (make sure you're using firefox 114 :))

[Foxite]

I have the opposite problem now. My yubikey doesn't have a pin configured. Now firefox demands one. Defaults didn't work, guessing at 1234 or 0000 didn't work, and somehow I had the same problem when I tried to change it. Now it's locked and I have to reset it, as well as all websites I'm using it with.

I guess this is a good time to configure a pin code, as per the other comments here.

[Goury]

Doesn't work for me, FF116

[tombo]

Great, works for me now in Firefox 117 !

[CyberTee]

Worked on Firefox 131 but all of sudden no longer works on Firefox 132. I get prompted to enter my PIN, I enter it and still gets prompted to enter or finish the installation. Mind you, it works seamlessly on Chrome and Edge browsers on Mac. Wonder what could have been the issue here.

[Flashwit]

Confirming here that Firefox 132 has broken my Yubikey flow. Tap, pin, tap, just cycles back to the pin entry input endlessly.

Works perfectly fine in Edge.

[alexd007]

New Yubikey user on Mac (14.7.3), works fine on Edge (set up with pin), login to AWS works fine.

On Firefox 132.0.2, I get stuck in a pin loop (asks for pin over and over).