search

ProtonMail / WebClients

Monorepo hosting the proton web clients
GNU General Public License v3.0
4.35k stars 553 forks source link

Implement support for U2F / FIDO2 as second login factor #197

Closed RAYs3T closed 1 year ago

RAYs3T commented 4 years ago

Is your feature request related to a problem? Please describe. The login to such an important resource should be secured as best as possible.

Describe the solution you'd like When authentificating with a password, you should have the option to specify a U2F / FIDO2 device as second factor. Not only a time based code generator.

Also it would be nice if you could set-up multiples devices.

Describe alternatives you've considered There are non. You have to use timed based codes...

Additional context Requires major changes to the server side auth mechanism.

bartbutler commented 4 years ago

Hi. We agree, but due to restrictions in FIDO/U2F (and WebAuthn) each registration is limited to a single domain, which presents problems for us as we currently use two (protonmail.com and protonvpn.com). We will be consolidating our domains in the coming months and then revisit this--we did do much of the work to implement U2F on the server side already.

ddimick commented 2 years ago

Please re-open this issue, as the domain consolidation has now taken place.

bartbutler commented 2 years ago

Yup.

amund-ersland commented 1 year ago

I get errors trying to use my yubikey in safari and firefox on mac os. It works fine in ios

RAYs3T commented 1 year ago

@amund-ersland You're not talking about FIDO here...? Since this is not yet supported :(

bartbutler commented 1 year ago

It is supported for a month or two now (on web).