Yubico Forum

I've been trying to piece meal a clean solution to use KeePass 2 on PC/Win7 + Android 7. I got the KeePass2 + KeeChallenge to work awesome on desktop (with even no interaction scenario), but I'm having a hard time getting the Android piece to work. I'm trying to use KeePass2Android with the YubiChallenge BUT it doesn't seem to work (KeePass2Anroid doens't launch YubiChallenge or the NFC integration with YubiChallenge is not working).

I know the YubiClip can copy using a static password, but this isn't as strong a security option (and actually more work in the case of desktop use).

Does anyone have any experience getting the KeePass2 + Yubikey to work nicely on Android 7 they can share?

Thanks!

In my experience you can not use YubiChallenge with Keepass2Android - it clashes with its internal Yubikey Neo support, each stealing the NFC focus from the other. Use the KeeChallenge plugin with Keepass2 on the Desktop, and the internal Challenge-Response method in KP2A.

Hi Sevo, could you clarify the steps you use for the KP2A? I have it installed, open kdbx, and select "Password + Challenge-Response". There's a field for password, and a button to "Load OTP Auxiliary File...". If I click the button, it just shows another screen titled "Select the storage type", with options to select System file picker, dropbox, etc. If I just swipe the NEO, it just prompts with Chrome, Firefox, Samsung Internet... Should there be one for KP2A?

Thanks!

Hi peach200,
You need to be sure you have your challenge .xml file in your phone's storage. Once you click the Load OTP Auxiliary File button, navigate to the .xml file in your phone's storage. When it is selected, you will be prompted to swipe your YubiKey NEO.

This page is very helpful if you would like to check out their setup and configuration instructions:
https://b3n.org/yubikey-two-factor-authentication

Cheers!