The YubiKey OTP resides in slot 1): ykpersonalize -2 -a -ochal-resp -ochal-hmac -ohmac-lt64 -oserial-api-visible -oallow-update Write the HMAC key to slot 2 (Set through the first switch.Create a 20 byte HMAC key: dd status=none if=/dev/random bs=20 count=1 | xxd -p -c 40.To add YubiKey as a secure key, you must first configure/set it up for Places which do support the same mechanism. This means that the database can only be open in You can ADD a YubiKey as additional protection to the database but you cannot Security (on the key you like to remove) KeePassXC To remove the key, use the Remove button in the Codeberg → Settings → Enter Nickname for the new key to be added.Webauthn/Hardware based 2FA List of known sites that support 2FAĬodeberg (Gitea) uses Webauthn as a second factor. To remove a token, open the app, use NFC to read the data, long press an item.Place YubiKey to the phones NFC and the token will be stored to the YubiKey.After adding the token data, press Save.Press the + button to add a new token either manual or via QR code.Use and Android app, for example Yubico Authenticator link to.TOTPs are stored on the YubiKey, an app on mobile acts as means to display the ability to create/keep a backup key - needs to be done for each service/key.have means to remove data/reset the data for each of the above item.secure a Keepass database with a key (possible but not usable at the moment due to missing compatibility with mobile client).use for website login with Webauthn (typically as a second factor).use with TOTP (website login second factor).

A howto for using the Yubikey (5 NFC) with Linux and Android.

Yubikey linux