Yubico Forum

Hey guys

Could it be that I can't store more than 2 accounts on my yubikey with the android yubico authenticator?

I would ditch the google auth app completely if I could store all my credentials on my yubikey.

Any help is apreciated

On the YubiKey NEO and YubiKey 4, you can store around 30 OATH credentials using Yubico Authenticator. If you're adding using the desktop application, go into Settings and make sure "read from slot 1" and "read from slot 2" are not selected, otherwise it will attempt to store the credentials in one of the two configuration slots.

Alright, I also read that in the FAQ that normally it should be able to store 30 OATH keys.

The problem is, it doesn't! I tried this approach on both the desktop app and my phone with the yubico authenticator.

So I scan the QR code, trying to add some keys when the key didn't have any.
2 entries seem to work. But when I try to add a third one it passes the scan, tells me that it has added the credential and presents me back with the home window where there are still only 2 keys (and not the third one I've added)

If I remove one of the 2 keys I'm able to fill it back in. But the maximum amount is stuck on only 2.

Are you sure you have a YubiKey NEO or YubiKey 4?

Be aware that you could be writing the credentials on the 2 configuration set for the OTP side of the device, rather using the ykoath-applet?

what you want is to add the key via its base64 representation or via a qr code most likely.

Yes I have a NEO (has NFC / Wifi icon on top)

And I assume I can't write to those slots as long these options are turned off like in the screenshot here:
http://prntscr.com/a4hrd9

Also the 2 entry cap first occurred to me when I was using the android app so I assume I couldn't do anything wrong with something simple as that.

I have no thoughts here. I have never seen such a small cap on a NEO or YK4 on Yubico Authenitcator for Android (and in the case of the Desktop version, only if "read from slot 1" pr "read from slot 2" are selected). Here is a random YubiKey NEO I have here. When I'm testing adding OATH credentials I just scan the one on this page over and over (and name each credential differently) - https://developers.yubico.com/yubioath-desktop/:





Can you try custom naming when you add a new credential? For example, when adding your Hotmail account, change the entry under Credential name to just "Hotmail", Gmail to "Gmail", etc.

So again I scan a QR code for facebook and tried naming it just "Facebook" or any other random name.
The Authenticator on my smartphone tells me that the credential is added and returns to the window with all my saved accounts.

This is what I see and it has absolutely not added my facebook entry.
https://www.dropbox.com/s/1h9p2gqlo0rdr ... 4.png?dl=0

Also my device (NEO) has the same description as mine so there shouldn't be any difference.

I've got another thought on this.
Could it be that I need to reset the key and update the firmware or something before custumizing it?

It all seems so weird. I hope I'll get out of this because I really love the product.

You can reset the OATH applet with either opensc-tool or ykneomgr:

https://developers.yubico.com/ykneo-oath/Reset.html

If that doesn't work, please create a support case at yubi.co/support. Make sure you include the YubiKey Serial Number and Order Number.

Where can I download and install these tools and are the commands on the linked page exactly what I need to copy and paste into my terminal or do I need to alter something to the command itself?

Also. Doesn't this reset my entire device? (and probably disables me from logging in on the forums again if I need my OTP)