U2F support over NFC

app:mobile

#1

Hello,

please support U2F via NFC. GitHub for example works this way.


#2

I voted because I think this important, but my understanding is that there are no available C# libraries to enable this behavior. U2F is supported on Android via NFC by way of Chrome and Google Authenticator APIs, but I am not aware of any apps that implement U2F support.

As a work-around, my plan is to enable U2F and Yubikey OTP on Bitwarden using my NEO for both. Based on the priorities listed here: https://help.bitwarden.com/article/setup-two-step-login/

You can enable multiple two-step login methods. If you have multiple two-step login methods enabled, the order of preference for the default method that is displayed while logging in is as follows: FIDO U2F → YubiKey → Duo → Authenticator app → Email. You can manually switch to and use any method during login, however.

This means that I should be able to use U2F on any PCs with a USB port and fallback to Yubikey OTP on mobile.

I am also considering only enabling U2F on Bitwarden. This means that there will theoretically be no way to log into Bitwarden on a new phone. However, if you rarely switch phones, then you can use a back-up code to disable 2FA (or temporarily disable U2F on a PC), log in, and then re-enable U2F after logging in. Combined with the fingerprint lock on mobile, I think this is a reasonable configuration, but may not be suitable for people who switch phones regularly.

I am a new Yubikey user, so I am not sure of the security differences between OTP and U2F. My understanding is that the improved security of U2F is most beneficial on PCs; the attack vector for OTP on mobile via NFC should be fairly small.

I’m not positive, but it looks like this may be available to be implemented: https://developers.google.com/identity/fido/android/native-apps


#3

I second U2F over NFC. I have a Titan key from Google that supports NFC that I am dying to use with my iPhone. I am picking through the code, and it looks like all the ingredients are there to make it happen, it just needs to be wired up.


#4

I’m also looking for NFC support via Titan (Feitian) NFC key.


#5

Same here… Need TITAN support over NFC or Bluetooth


#6

Hoping for yubikey FIDO2 over NFC.