Yubico Forum

As I understand it now, the Neo U2F generates a new pub/private keypair per site that you register it to, so it must store the private key, along with the requesting site's keyhandle for verification of the request. I haven't seen any way of managing said credentials and there's no documentation on how many the Neo can store. Does anybody know the details on this?

The key pairs are generated on the device (secure element) but are not
stored there.

The key pair (public key and encrypted private key) are stored by each
relying party, i.e. the one initiating the registration.

This approach allows for no practical limit to the number of services to be
associated with the key.

Oh sweet! Thanks!