Yubico Forum

goal: I want to be able to use the NEO to auth to LastPass on my Android phone via NFC.

So I try to program the necessary URI.

I am using Fedora Linux 22 (up2date) and when I run the personalization tool it tells me initially that only Slot 1 is configured (correct so far).

Tools - NDEF Programming - Configuration Slot 2 - NDEF payload "https://lastpass.com/mobile/?otp="

Program

-> "NDEF successfully written

When I close the tool and reopen, it still tells me that only Slot 1 is configured.

AND testing it with my Android phone it does not work ... (yes, I set mobile access to "Disabled" in LP settings and entered email/MP before it asks me to "apply" the Yubikey).

The NEO has Firmware 3.4.3 if that is important.

-

I am thankful for any pointers to make this work.

You did everything correctly except for the Configuration Slot. The NDEF Programming just defines whether the Slot 1 (short press) or Slot 2 (long press) is sent over NFC. By default, Slot 1 is sent (because it's the only slot that's programmed). If you want to send your OTP from Slot 1 for LastPass, just select "Configuration Slot 1" in the NDEF Programming section.

If you have LastPass mobile installed on your Android phone, it should be able to receive the OTP without making any programming changes to the NEO (although now you'll need to return the NDEF settings to Slot 1).

I prefer to use YubiClip to capture the OTP to the clipboard, but that's just my preference.

For me, Lastpass is working without any setup on the Yubikey. I logged in to my vault. Activated the Yubikey. Pressed the button at the right place ( field). Forced to use it also for the mobile.

Then login on the mobile (Android): NFC is on. Username/password-> OK. Asks for Yubikey. Taping to the NFC reader. Works.

Thanks for the reply.

I chose Slot2 to avoid "disabling" the OTP-feature I use via USB.
Does the choice within the NDEF tool mean "send Slot X via NFC" instead of "replace config of Slot X" then?

2nd: Do I have to press the button as well when I hold the Yubikey against the phone?
3rd: Yubiclip, aha ... advantages in this case?

Seems I have to reset the NDEF settings first, maybe I simply didn't realize to have to press the button as well!

thanks, Stefan


edit: works now, thanks! reset the NDEF to slot 1 with standard URI, and now also pressed the button

Button press is not required to send your slot 1 or slot 2 configuration over NFC. By holding the NEO against the NFC antenna, the NDEF settings determine which slot to output.