PhilippC / keepass2android

Password manager app for Android
https://play.google.com/store/apps/details?id=keepass2android.keepass2android
GNU General Public License v3.0
4.87k stars 394 forks source link

Keepass2Android blocks yubico authenticator #839

Closed dodtsair closed 5 years ago

dodtsair commented 5 years ago

I like that keepass2android has integrated with Yubico, I might decide to use it at some point. But for now I use the Yubico Authenticator android app as a MFA TOTP platform. I tap my yubikey against the back of my phone, the yubico authenticator comes up and shows me my otp for all my services.

Recently, I think due to an update in keepass2android, that has stopped. Now keepass2android gets the event for the yubikey and since it is not configured to work with a yubikey it gives me a little warning, "Please select a database first, otp has been discarded for security reasons".

Is there a way I can disable keepass2android reading the yubikey, so that yubikey authenticator will resume getting the events?

tehshane commented 5 years ago

Similar issue here. When I'm in Chrome and tap my key as part of a WebAuthN login on an unrelated site, Keepass2Android instead opens and tries to unlock my database, interrupting the flow.

markchalloner commented 5 years ago

A workaround for this (on Android 9.0):

  1. Open Keepass2Android Open by default settings (Settings > Apps > See all ... apps > Keepass2Android > Advanced > Open by default).
  2. Set Open supported links to Ask every time.
PhilippC commented 5 years ago

unfortunately I don't know of a way to make this configurable because it's part of the App manifest. So I suggest to use the workaround suggested by @markchalloner