My personal hack is to use both. Encrypt the ed25519-sk private token with OpenPGP, cache it in RAM only.
I wish FIDO2 had a "cached PIN/persistence" mode though! ;;
I wish FIDO2 had a "cached PIN/persistence" mode though! ;;
February 10, 2026 at 5:43 AM
My personal hack is to use both. Encrypt the ed25519-sk private token with OpenPGP, cache it in RAM only.
I wish FIDO2 had a "cached PIN/persistence" mode though! ;;
I wish FIDO2 had a "cached PIN/persistence" mode though! ;;
#Savespeech Idk if they’ll post about this. @fsc.bsky.social is supporting OpenAge’s Agekey, a “reusable, FIDO2 passkey-based cryptographic age assurance solution that creates reusable, privacy-preserving age credentials without tracking a user's identity.”
This is, I think, a good thing.
This is, I think, a good thing.
FSC Supports OpenAge Initiative and Adoption of AgeKeys for User-Centric Age Assurance
The Free Speech Coalition (FSC) announced today that it will support the OpenAge Initiative and its AgeKey cryptographic age assurance solution.
www.xbiz.com
January 27, 2026 at 6:41 PM
#Savespeech Idk if they’ll post about this. @fsc.bsky.social is supporting OpenAge’s Agekey, a “reusable, FIDO2 passkey-based cryptographic age assurance solution that creates reusable, privacy-preserving age credentials without tracking a user's identity.”
This is, I think, a good thing.
This is, I think, a good thing.
La CNI n'est pas adaptée pour ça, c'est très proche du protocole des e-passport. Pas fait pour stocker des secrets. Mieux vaut s'orienter vers de la JavaCard et une applet open source comme IsoApplet ou PIVapplet. Ou une yubikey/FIDO2/U2F avec pam-u2f.
January 27, 2026 at 3:52 AM
La CNI n'est pas adaptée pour ça, c'est très proche du protocole des e-passport. Pas fait pour stocker des secrets. Mieux vaut s'orienter vers de la JavaCard et une applet open source comme IsoApplet ou PIVapplet. Ou une yubikey/FIDO2/U2F avec pam-u2f.
En suite bureautique il y a toujours libreoffice ;
En alternative au SSO je suggère heylogin.app : c'est allemand, c'est un coffre comme 1password, f-secure, etc. mais c'est simple car ça fonctionne sans mot de passe, avec la biométrie du téléphone ou une clé FIDO2 (genre Neowave.fr ).
En alternative au SSO je suggère heylogin.app : c'est allemand, c'est un coffre comme 1password, f-secure, etc. mais c'est simple car ça fonctionne sans mot de passe, avec la biométrie du téléphone ou une clé FIDO2 (genre Neowave.fr ).
NEOWAVE - Authentification forte et transactions sécurisées
NEOWAVE offre des solutions toujours plus performantes en matière de sécurité des systèmes d’informations et des infrastructures sensibles.
Neowave.fr
January 18, 2026 at 11:40 PM
En suite bureautique il y a toujours libreoffice ;
En alternative au SSO je suggère heylogin.app : c'est allemand, c'est un coffre comme 1password, f-secure, etc. mais c'est simple car ça fonctionne sans mot de passe, avec la biométrie du téléphone ou une clé FIDO2 (genre Neowave.fr ).
En alternative au SSO je suggère heylogin.app : c'est allemand, c'est un coffre comme 1password, f-secure, etc. mais c'est simple car ça fonctionne sans mot de passe, avec la biométrie du téléphone ou une clé FIDO2 (genre Neowave.fr ).
okay i'm running with an export of my ssh key for now but if anyone knows how to get ragenix to see age-plugin-fido2-hmac please tell me
ragenix is aptly named for how I feel after spending an afternoon trying to get it to find plugins
December 23, 2025 at 6:56 PM
okay i'm running with an export of my ssh key for now but if anyone knows how to get ragenix to see age-plugin-fido2-hmac please tell me
March update for EntraFIDOFinder a #PowerShell module and webUI for finding which FIDO2 keys are Entra Attestation compatible clatent.com/2025/03/entr...
EntraFIDOFinder March Update
We are in March, and looks like no new major changes. I may have to start sending this update out later in the week, as I’m wondering if Microsoft hasn’t updated their page yet. Some things I did n…
clatent.com
March 3, 2025 at 12:43 PM
March update for EntraFIDOFinder a #PowerShell module and webUI for finding which FIDO2 keys are Entra Attestation compatible clatent.com/2025/03/entr...
This guide provides a step-by-step walk-through for integrating a uTrust FIDO2 security key (Identiv uTrust) with Fedora 42 to secure:
* LUKS2 full disk encryption (FDE)
* Graphical login (LightDM + Cinnamon)
* Sudo elevation
Learn more […]
* LUKS2 full disk encryption (FDE)
* Graphical login (LightDM + Cinnamon)
* Sudo elevation
Learn more […]
Original post on fosstodon.org
fosstodon.org
September 24, 2025 at 8:34 PM
This guide provides a step-by-step walk-through for integrating a uTrust FIDO2 security key (Identiv uTrust) with Fedora 42 to secure:
* LUKS2 full disk encryption (FDE)
* Graphical login (LightDM + Cinnamon)
* Sudo elevation
Learn more […]
* LUKS2 full disk encryption (FDE)
* Graphical login (LightDM + Cinnamon)
* Sudo elevation
Learn more […]
My wish is that people just wouldnt use websites with crap security
force devs to do better. Support password managers and passkeys, demonstrate they hash&salt, prioritise fido2 over totp then email you a reset link rather than sms
But many dont care about this & nothing improves till most do
force devs to do better. Support password managers and passkeys, demonstrate they hash&salt, prioritise fido2 over totp then email you a reset link rather than sms
But many dont care about this & nothing improves till most do
November 25, 2025 at 12:47 PM
My wish is that people just wouldnt use websites with crap security
force devs to do better. Support password managers and passkeys, demonstrate they hash&salt, prioritise fido2 over totp then email you a reset link rather than sms
But many dont care about this & nothing improves till most do
force devs to do better. Support password managers and passkeys, demonstrate they hash&salt, prioritise fido2 over totp then email you a reset link rather than sms
But many dont care about this & nothing improves till most do
Devs, il faut qu'on parle. 👩💻👨💻
Si vous codez encore hashlib.sha256(password) en 2025, votre sécurité est en échec (c) @newsoft.bsky.social
Le futur, c'est d'arrêter de gérer des secrets. C'est FIDO2, WebAuthn et les Passkeys.
Si vous codez encore hashlib.sha256(password) en 2025, votre sécurité est en échec (c) @newsoft.bsky.social
Le futur, c'est d'arrêter de gérer des secrets. C'est FIDO2, WebAuthn et les Passkeys.
Road to Passkeys : La fin des mots de passe est (enfin) là 🚀
La mort du mot de passe. Voici la feuille de route pour comprendre comment nous allons passer de '123456' à la biométrie web.
blog.gioria.org
November 24, 2025 at 8:53 AM
Devs, il faut qu'on parle. 👩💻👨💻
Si vous codez encore hashlib.sha256(password) en 2025, votre sécurité est en échec (c) @newsoft.bsky.social
Le futur, c'est d'arrêter de gérer des secrets. C'est FIDO2, WebAuthn et les Passkeys.
Si vous codez encore hashlib.sha256(password) en 2025, votre sécurité est en échec (c) @newsoft.bsky.social
Le futur, c'est d'arrêter de gérer des secrets. C'est FIDO2, WebAuthn et les Passkeys.
Another sin to Ubuntu's very long list:
- not using systemd in initramfs thus unable to unlock my rootfs with FIDO2 keys
- not using systemd in initramfs thus unable to unlock my rootfs with FIDO2 keys
December 9, 2025 at 5:45 PM
Another sin to Ubuntu's very long list:
- not using systemd in initramfs thus unable to unlock my rootfs with FIDO2 keys
- not using systemd in initramfs thus unable to unlock my rootfs with FIDO2 keys
パスキー認証（FIDO2） | 楽天証券
https://www.rakuten-sec.co.jp/web/security/passkey/
https://www.rakuten-sec.co.jp/web/security/passkey/
パスキー認証（FIDO2） | 楽天証券
パスキー認証（FIDO2）とは、不正アクセスやフィッシング詐欺への耐性が飛躍的に向上した次世代の認証技術です。お客様の端末のロック解除方法（指紋認証、顔認証、PINコード、パターン認証など）を利用した本人確認を行うため、ログインID・パスワードの入力やメールによるログイン追加認証が不要となり、安全かつ簡単にログインできます。
www.rakuten-sec.co.jp
October 26, 2025 at 1:36 PM
パスキー認証（FIDO2） | 楽天証券
https://www.rakuten-sec.co.jp/web/security/passkey/
https://www.rakuten-sec.co.jp/web/security/passkey/
How To Fix YubiKey Manager FIDO2 Error Message On Windows - Failed connecting to the YubiKey. Make sure the application has the required permissions youtu.be/Hs_ZKSlD6KI #Websplaining #FIDO2 #FIDO2ErrorMessage #YubiKey #FixYubiKeyManagerFIDO2ErrorMessage #YubiKeyManager
How To Fix YubiKey Manager FIDO2 Error Message On Windows - Failed connecting to the YubiKey
YouTube video by Websplaining
youtu.be
September 4, 2025 at 6:16 PM
How To Fix YubiKey Manager FIDO2 Error Message On Windows - Failed connecting to the YubiKey. Make sure the application has the required permissions youtu.be/Hs_ZKSlD6KI #Websplaining #FIDO2 #FIDO2ErrorMessage #YubiKey #FixYubiKeyManagerFIDO2ErrorMessage #YubiKeyManager
חדש! Amazon WorkSpaces Secure Browser תומך כעת ב-WebAuthn לאימות מאובטח באמצעות מפתחות FIDO2 וזיהוי ביומטרי בדפדפני Chromium
Amazon WorkSpaces Secure Browser now supports WebAuthn redirection for local Chromium browsers
aws.amazon.com
December 23, 2025 at 7:06 PM
חדש! Amazon WorkSpaces Secure Browser תומך כעת ב-WebAuthn לאימות מאובטח באמצעות מפתחות FIDO2 וזיהוי ביומטרי בדפדפני Chromium
emergenCITY Collaboration Award for the CHI Paper "FIDO2 the Rescue? Platform vs. Roaming Authentication on Smartphones" [caption id="attachment_18651" align="alignnone" width="500"] Steffen Haesler and Florentin Putz (left) after receiving the emergenCITY Collaboration https://peasec.de/?p=18650
August 20, 2024 at 8:21 AM
emergenCITY Collaboration Award for the CHI Paper "FIDO2 the Rescue? Platform vs. Roaming Authentication on Smartphones" [caption id="attachment_18651" align="alignnone" width="500"] Steffen Haesler and Florentin Putz (left) after receiving the emergenCITY Collaboration https://peasec.de/?p=18650
With the caveat that I am one of the few folks who've never worked in the government in any capacity, I think there's also some issue with how do you have a FIDO2 authenticator that can enter a SCIF. That said, I've been in the room when this exact problem has been discussed before with stakeholders
September 27, 2024 at 7:09 PM
With the caveat that I am one of the few folks who've never worked in the government in any capacity, I think there's also some issue with how do you have a FIDO2 authenticator that can enter a SCIF. That said, I've been in the room when this exact problem has been discussed before with stakeholders
Why are FIDO2 tokens still kinda expensive? An uncertified & non physically hardened version could probably be sold for <5$
October 20, 2024 at 9:28 AM
Why are FIDO2 tokens still kinda expensive? An uncertified & non physically hardened version could probably be sold for <5$
Why do they require JavaScript? As far as I understand, you should be able to implement the FIDO2 spec in any language.
January 11, 2025 at 2:49 PM
Why do they require JavaScript? As far as I understand, you should be able to implement the FIDO2 spec in any language.
Versasec Adds FIDO2 Batch Issuance and Thales Token Support Versasec, a global leader in smart card management, announces the release of vSEC:CMS Version 7.1. The new version features batch […] T...
#Technology
Origin | Interest | Match
#Technology
Origin | Interest | Match
June 30, 2025 at 5:41 PM
Versasec Adds FIDO2 Batch Issuance and Thales Token Support Versasec, a global leader in smart card management, announces the release of vSEC:CMS Version 7.1. The new version features batch […] T...
#Technology
Origin | Interest | Match
#Technology
Origin | Interest | Match
Now for shared devices, let me use fido2 with a yubikey without throwing pop-ups at me and we'll be good.
May 6, 2025 at 6:35 AM
Now for shared devices, let me use fido2 with a yubikey without throwing pop-ups at me and we'll be good.
И правилно ругаеш... Вече има алтернативи на паролите - passwordless (fido2), Single sign-on (OAuth). Извинявайте за техническия жаргон, но той е насочен, както и вашето оплакване, към колегите разработчици и софтуер дизайнери.
May 17, 2025 at 4:16 PM
И правилно ругаеш... Вече има алтернативи на паролите - passwordless (fido2), Single sign-on (OAuth). Извинявайте за техническия жаргон, но той е насочен, както и вашето оплакване, към колегите разработчици и софтуер дизайнери.
銀行と証券会社は全部パスキーでいいと思うんだが…。
楽天証券: 2025年秋頃から、安全かつ簡単にログインできるパスキー認証（FIDO2）を導入予定です
楽天証券: 2025年秋頃から、安全かつ簡単にログインできるパスキー認証（FIDO2）を導入予定です
2025年秋頃から、安全かつ簡単にログインできるパスキー認証（FIDO2）を導入予定です
2025年秋頃（予定）から、すべての取引チャネルでログインする際に「パスキー認証（FIDO2）」を導入します。
www.rakuten-sec.co.jp
July 19, 2025 at 2:30 AM
銀行と証券会社は全部パスキーでいいと思うんだが…。
楽天証券: 2025年秋頃から、安全かつ簡単にログインできるパスキー認証（FIDO2）を導入予定です
楽天証券: 2025年秋頃から、安全かつ簡単にログインできるパスキー認証（FIDO2）を導入予定です