Yubico Forum

I recently was given a Yubikey, and I started to read about some of the more advanced features. I noticed that Yubico provides a service in which you can program several Yubikeys at once, and this made me wonder if someone could have programmed several Yubikeys to have the same FIDO U2F Secret? This would mean that the attacker (person who gave me the key) could now use any key in the batch interchangeably?

The paranoid side of me thought that maybe I should "reset" the device secret? A similar question was asked in 2014 and the answer seemed to indicate that this "might come in the future".

So can we reset the FIDO U2F Secret on a Yubikey 4? If so, how (I don't see anything in the personalization tool about this).

Cheers,
Ian

There's no way to reset the secret, but there is also no way to inject a specific secret. All our devices capable of U2F randomly generate the secret on-chip, and this secret never leaves the device. This ensures that each device is unique, and that no one has access to the secret.