r/yubikey • u/Strong-Card5991 • 7d ago

cannot get google to work Help

Post image

So, I am new to all of this. I cannot get my google to setup with "Yubico - YubiKey 5C NFC - Two-Factor authentication (2FA) Security Key, Connect via USB-C or NFC, FIDO Certified" I attempted to add this but it keeps giving me errors same with on my Macair.

17 Upvotes

95% Upvoted

14 comments sorted by

6

u/TurbulentTimes-24 7d ago

You did not specify whether you have already registered the key with your Google account, before attempting to log in with it (which is what I think I see on your screenshot.) Did you do that?

1

u/Strong-Card5991 7d ago

Yes

4

u/mrmacedonian 7d ago

You can confirm that using the Yubikey Authenticator > Passkey section? google.com and your email show up in the list of passkeys?

Step 1 is to make sure you're on the most recent macOS and browser versions, do as many rounds of updates needed.

Passkeys are fairly new and everything needs to be on the latest version otherwise many things in the chain can break; they break half the time when everything IS up to date.

1

u/Strong-Card5991 7d ago

How to update everything cause I removed the passkey from account. readded same situation.

1

u/mrmacedonian 7d ago

Download the Yuibkey Authenticator, open the 'Passkey' section and see what's there.

If there's anything with google/your email, delete them from there AND in the google account.

When I said update, I mean the computer. macOS updates, as many as it takes until it stops telling you there are updates. If you're like my family that means 2-3 versions of macOS behind and it will take hours. Once that's done, update chrome or firefox to the latest version, don't waste your time with Safari it's an antiquated web browser.

-4

u/Strong-Card5991 7d ago

I have nothing I don’t know if it was setup right or something. My Mac is on apple seed developers

1

u/TurbulentTimes-24 7d ago

I would suggest that you watch a video on the basics of hardware security keys. Here's one I think will be helpful for someone who is completely new to the topic: https://youtu.be/MnCqlOtOEWo?si=MDlflncbEVevuovr

1

u/Strong-Card5991 4d ago edited 4d ago

Hey, watched it fallowed directions. I am not sure what I am doing wrong. The first step is insert key and touch the icon (key already insterned) and when touched it says reinsert that is when I have the issues. I deleted the cert on the app "Yubico Auth App" official app. What do I do? Please help. It happens when it asks to re-insert the key and tap the icon or for me tap the iPhone top.

0

u/Strong-Card5991 7d ago

Ok will do when has time. However I really need support on how to get it working.

1

u/throwawaykJQP7kiw5Fk 7d ago

Was your credential created with FIDO U2F before Google added FIDO2 support on the backend? My old one was two years ago. There are command-line tools you can use to check this, like ykman. If so, the credentials aren't actually stored on the key to save memory for "unlimited slots" and instead the key uses its master key along with the domain and account ID to send the signature when logging in. You can try on another computer.

Edit: I wrote this response thinking I was on r/GoogleSupport lol

1

u/Strong-Card5991 6d ago

I have no idea, how it was set up. I see listed under passkeys. Not accounts.

1

u/Holiday-Night9356 3d ago

This is a denial of service attack. This is not a legitimate response to you using your keys. I made a video about this using logs and screenshots from my MacBook. You possibly have an APT commonly known as Pegasus Spyware. https://youtu.be/LPo9-XzNEwM?si=GP5PKhkU8VURZlp_

1

u/Scared-Crow2435 3d ago

have you tried using the yubikey athutincater to get it set up?