Add Nitrokey as a FIDO2-2FA option

I’m trying to add a Nitrokey as a FIDO2 authentication method. Following the instructions works up to step 6. The Nitrokey is registered. However, when I log out and then try to log back in with FIDO2, the login circle spins, but I can’t log in. Can anyone confirm this?

2FA-passkey – or “login with passkeys”?
… Windows 11?
… which BW app, and what version?

Following these instructions, Win10, Firefox

Does your Nitrokey require/“force” the use of a PIN each time (i.e. is it set to “require UV”)?

PS: I now added “2FA” to the title.

No, only via touch. Tested with GitHub. There, the Nitrokey is added normally via touch. With Bitwarden, adding it opens Windows Hello and prompts for PIN entry.

Hm, unfortunately I don’t have Windows 10 any longer.

Could you post screenshots from the dialogs that Windows Hello/Security shows (and which options you choose), when you click “Read key” in the web vault?

My mistake, I followed the same steps with Chrome. The Nitrokey was recognized during login. I adjusted the NoScript setting in Mozilla Firefox, and now it works.

Sorry for the inconvenience.

1 Like