When KeePassium requests your YubiKey, you will need to touch the “Y” button on the NFC key (or touch the sides of the YubiKey 5Ci key).Īs a final step, make sure that apps can talk to your YubiKey.

Require touch - this prevents rogue apps from talking to your YubiKey without your permission.

If you ever lose your YubiKey, you will need that secret to access your database and to program the replacement YubiKey. Make sure to copy and store the generated secret somewhere safe.

Secret key - press Generate to randomize this field.

Set your HMAC-SHA1 challenge-response parameters:.

YubiKey Manager: Challenge-response secret key

Select Challenge-response credential type and click Next.

The first slot is reserved in some keys, so select Configuration Slot 2.

Click Applications → OTP YubiKey Manager: OTP slot selection.

If you see an “Unknown error occurred” on macOS, go to system preferences → Security & Privacy → Input Monitoring, and allow input monitoring for YubiKey Manager.Insert your YubiKey, if you have not done that yet.

On your computer, install the YubiKey Manager and launch it.

The following steps will prepare your YubiKey for the challenge-response mode.

How to use YubiKey with KeePassium # yubikey # guide # 2fa Initial setup

Yubi key ios