Yubico Forum
https://forum.yubico.com/

Password counter for NFC?
https://forum.yubico.com/viewtopic.php?f=26&t=2561
Page 1 of 1

Author:  AquaL1te [ Wed Feb 08, 2017 10:54 am ]
Post subject:  Password counter for NFC?

Hi, I use my NEO with the Android apps OpenKeychain for GPG and Yubico Authenticator to store time based OTP. For these services I need to provide a pin (GPG) or password (Authenticator) with the NFC. Now I wonder if faulty password attempts are logged, just as with the gpg-agent on my Linux system, after 3 attempts the key blocks. I'm not sure if NFC can also do this. Of course I can test this, but I rather not. I can't find any documentation about this. Can anyone comment on this and preferably also provide a source?

Author:  AquaL1te [ Sat Feb 11, 2017 6:08 pm ]
Post subject:  Re: Password counter for NFC?

AquaL1te wrote:
Hi, I use my NEO with the Android apps OpenKeychain for GPG and Yubico Authenticator to store time based OTP. For these services I need to provide a pin (GPG) or password (Authenticator) with the NFC. Now I wonder if faulty password attempts are logged, just as with the gpg-agent on my Linux system, after 3 attempts the key blocks. I'm not sure if NFC can also do this. Of course I can test this, but I rather not. I can't find any documentation about this. Can anyone comment on this and preferably also provide a source?


I just did a test and yes if you enter a wrong pin code via NFC then the password counter decreases. One correct pin code entry via NFC or via USB is enough to reset the password counter. Great stuff! I don't think there is a password counter for the OTP via NFC, but there is also no password for USB of course. But having a password on NFC OTP still seems a good choice, even though unlimited password attempts are probably allowed.

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/