![Yubico Yubico](/uploads/1/3/7/5/137521580/611201129.jpg)
Hi there,
I have bitwarden_rs running on a Synology NAS in Docker. I have configured the env parameters for yubikey.
When I want to enable the yubikey in my user account on the web panel, I receive the error Invalid Yubikey OTP provided.
What am I doing wrong? Does the communication with the standard yubikey server work? How can I check that.
When I perform a test with my yubikey on https://demo.yubico.com/otp/verify all looks good.
I have also generated the OTP into notepad and copied it manually into the web interface - but always the same result.
Any ideas are appreciated
Thanks,
Sebastian
Reading Time: 3minutesI have bitwarden_rs running on a Synology NAS in Docker. I have configured the env parameters for yubikey.
When I want to enable the yubikey in my user account on the web panel, I receive the error Invalid Yubikey OTP provided.
What am I doing wrong? Does the communication with the standard yubikey server work? How can I check that.
When I perform a test with my yubikey on https://demo.yubico.com/otp/verify all looks good.
I have also generated the OTP into notepad and copied it manually into the web interface - but always the same result.
Any ideas are appreciated
Thanks,
Sebastian
Introduction
On Bitwarden I use a different master password to keep the 2FA paradigm: something you know + something you have/are. Using the static password as a master password is like 1½FA. The same goes for the Yubico Authenticator password, if you set one it should be different from the static password. Bitwarden provides a shell script for easy installation on Linux and macOS (Bash), or Windows (PowerShell). Complete the following steps to install Bitwarden using the shell script: (Linux Only) If you’ve completed the Docker Post-Installation steps, do so as the bitwarden user from the /opt/bitwarden directory. Bitwarden, Santa Barbara, California. 4,227 likes 103 talking about this 1 was here. Bitwarden is the easiest and safest way for individuals, teams, and business organizations to store, share.
Password Managers is still a necessity in 2020, and will be for a long time. I’ve been using Bitwarden with YubiKeys for a while now, so it was about time to share some experience, and how easy it’s to get started.
Bitwarden https://bitwarden.com/ is an Open Source Password Manager that is hosted on GitHub https://github.com/bitwarden. This means that you have full control over source code, and you also could contribute to the project. With Bitwarden you can simply self-host it, or run their Organization Plans that is hosted on Azure https://bitwarden.com/help/article/cloud-server-security/. Bitwarden offers different Organization Plans. To see what fits your demand go to https://bitwarden.com/#organizations. The Enteprises Plan supports Azure AD integration. I will cover this in another blog post.
Configure Bitwarden with your Favorite FIDO key
Bitwarden Local Install
- Bitwarden is an incredibly lightweight enterprise password manager that delivers strong, reliable multi-layered authentication with the YubiKey.
- Upgrading to Bitwarden Premium gets you some significant help for using two-factor authentication on websites. Like Myki, Enpass, and AgileBits 1Password, Bitwarden can itself generate the necessary TOTPs. Scan the QR code into the Bitwarden item with your smartphone, or copy and paste the equivalent secret code on a desktop device.
Bitwarden supports a whole range of Providers. When enabling 2FA you will also be prompted to download recover Code. Download these first, before proceeding to the 2FA setup! And Keep the Recovery codes safe, in case things went south!
To configure your FIDO key with YubiKey.
Go to:
1) Settings
2) Two-step Login
3) Manage
Go to:
1) Settings
2) Two-step Login
3) Manage
Just add your YubiKey with the Touch/Tap were it will populate the OTP or U2F, I recommend at least two YubiKeys, in case you lose your primary key. With the second backup key you can access your account if you ever lost your key! Yes, that will eventually happen ? You could also configure Bitwarden with another supported OTP/U2F key if you have another brand in your possession. If you do not have one, Authenticator Apps like Authy, Google, Duo is supported as well.
The list of supported Yubico keys that will works with Bitwarden https://www.yubico.com/works-with-yubikey/catalog/bitwarden-premium/ Roblox blender rig.
If you need to support an NFC compatible key, use the NFC support. I have NFC supported key, so I can access the Bitwarden on go with my Phone.
Restart the Windows 10 System The best way to clear the Windows memory cache is just to turn off the system and turn it on again. When trying to restart the system, Windows will either complete all the pending tasks or abandons them as needed. How to clear cached ram windows 10.
Test Login
After you have saved the settings, it’s time to test the login from your browser of preference. The login site https://vault.bitwarden.com
Bitwarden Yubikey Security Key
Let’s also test a login with iOS with an NFC compatible YubiKey
Summary
It’s without doubt that configuring 2FA with Bitwarden is straightforward with some simple steps. Just remember! Do not only configure one single YubiKey, that is not good practice. Precision transmission near me.
Bitwarden is feature-packed and should tick all your boxed if you have strong requirements for a password manager. With the wide range of supported OTP/U2F, I think this password manger will make you delighted for a long time. And yes, it’s Open Source that is a big bonus!
Bitwarden Smtp Settings
Documentation