Yubico Forum

Re: Where to Use

2014-12-07T22:31:28+01:00

Well, I know it works because I'm using it just fine. I'm not sure where things are going off the rails here.

What I'd try doing is installing Google Authenticator on your phone. Then, when you go to create a new OTP, you can then provision both your yubikey and the google authenticator app with the same code. When you are finished, both apps should show the same OTP. If they don't then you may have a clock skew problem on your PC.

Statistics: Posted by darco — Sun Dec 07, 2014 10:31 pm

Re: Where to Use

2014-12-06T22:55:11+01:00

I believe so. I went to both Facebook and Dropbox, selected 2 factor authentication, selected to use an app not SMS so it gives me a code instead of a QR code, so that's what I entered into the Yubico app. Now when the website asked to confirm, and enter the code, I copied the one generated from the app to the website and got the error.

Statistics: Posted by Paranoid — Sat Dec 06, 2014 10:55 pm

Re: Where to Use

2014-12-05T20:53:40+01:00

Weird. You sure you copied and pasted the secret correctly? Also, if you are using a TOTP credential, your clock will need to be accurate to within +/- 2 minutes or so.

What services are you wanting to use?

Statistics: Posted by darco — Fri Dec 05, 2014 8:53 pm

Re: Where to Use

2014-12-05T01:28:35+01:00

I'm seeing the credentials and the code, but when entering the code generated by yubico app to confirm the 2 factor authentication, they don't seem to work.

Statistics: Posted by Paranoid — Fri Dec 05, 2014 1:28 am

Re: Where to Use

2014-12-04T23:17:46+01:00

There are three pieces of information are needed to add a new OATH credential:

The type of token, either time-based (TOTP) or event based (HOTP).
A description of the credential. This typically describes the website and account the credential is associated with, but it could be anything you want to disambiguate.
A Base32-encoded shared secret, obtained from your service you want to use.

You enter this information for each website you want to use an OATH credential with, using that "add account" button. After you add each credential it should show up in the list.

If it is a TOTP credential, it will show the code. I'm not sure what the behavior of the desktop program is with respect to HOTP codes, but i imagine you would need to click on it and it then copies the code to your clipboard.

So are you seeing your credentials in the list after adding them?

Statistics: Posted by darco — Thu Dec 04, 2014 11:17 pm

Re: Where to Use

2014-12-04T22:45:28+01:00

Besides the Yubioath-desktop.pkg, is there anything else I have to install? The reason I ask is because when I launch the program, I get the icon in my taskbar, but there doesn't seem to be too many options. There's just a "add account" and "delete account". Under new account, it just have a spot for an email address, no website info, and when I click on get code nothing happens.

Statistics: Posted by Paranoid — Thu Dec 04, 2014 10:45 pm

Re: Where to Use

2014-12-04T22:35:11+01:00

Hi Tom,

Any chance we will see these apps end up in the Apple App Store? That would make it much more convenient to install on macs.

Statistics: Posted by darco — Thu Dec 04, 2014 10:35 pm

Re: Where to Use

2014-12-04T08:46:20+01:00

if you can get the new release on github fixes a problem with utf8 passwords.

I didnt had time to build a mac release.

Statistics: Posted by Tom — Thu Dec 04, 2014 8:46 am

Re: Where to Use

2014-12-03T22:57:40+01:00

Thanks again Darco, I just downloaded it and will give it a try when I get a chance. I appreciate all your help.

Statistics: Posted by Paranoid — Wed Dec 03, 2014 10:57 pm

Re: Where to Use

2014-12-02T01:44:32+01:00

Oh, no, I'm using a Mac. Yubico Authenticator works great on a mac:

https://developers.yubico.com/yubioath- ... -0.1.1.pkg

Statistics: Posted by darco — Tue Dec 02, 2014 1:44 am

Re: Where to Use

2014-12-02T00:39:00+01:00

Thanks for the reply darco, I appreciate it.

By using YubiOATH for Dropbox and Facebook, I'm guessing your using the Windows helper app? I'm on Mac and there doesn't appear to be a way to use that option at this time, or at least that what everything i've been reading sais.

Yeah the Bitcoin wallet feature would have been nice, that was one thing I was reading about before I actually purchased my Yubikey.

Statistics: Posted by Paranoid — Tue Dec 02, 2014 12:39 am

Re: Where to Use

2014-12-01T20:54:35+01:00

I use pretty much every app on my Yubikey NEO:

Yubico U2F: U2F at sites which support it (just google at the moment, sadly).
YubiOATH: Holding my TOTP/HOTP credentials for various websites, including google, wordpress, github, dropbox and Facebook.
OpenPGP: Holding my OpenPGP subkeys, which I use for signing emails, opening encrypted files, and SSH authentication.
YubiKey PIV: Holding my personal client-ssl and S/MIME certificate from StartSSL.com, as well as a self-signed PIV Auth certificate I use sometimes for SSH authentication.
YubiKey OTP: I use this for storing an HOTP credential that I use for banking.

I just wish the bitcoin wallet app had come to fruition. That would have been wonderful. But alas, maybe for NEOv4.0.

While I am not aware of the specific upper limit, the OATH app on the Yubikey NEO can likely hold more credentials than you will every realistically use.

Statistics: Posted by darco — Mon Dec 01, 2014 8:54 pm

Where to Use

2014-11-26T16:32:20+01:00

Good day everyone,

Well I'm relatively new to the Yubikey, I purchased the standard one a about 6 mths ago, and just received the new u2f neo version. I guess the reason for my post today is I'm wondering how everyone here is using their keys. I've been researching the site, as well as the web and everyone keeps saying how they are using it all the time, but don't really explain for what. So far I'm using the u2f for Gmail and I'm using LastPass, but want to be able to use it for much more (personal side, not corporate).

I've read you can use the TOTP app for dropbox, and I'm guessing other sites that use the 2 step auth. My question is, how many sites will the Yubikey hold? Also I keep reading about OTP, I know it's like a disposable password, are there many popular sites that use this so I can configure my key to use those.

Thanks for any replies, and I apologize for the rambling, but I want to get the most from my key.

Statistics: Posted by Paranoid — Wed Nov 26, 2014 4:32 pm