Pangolin v1.12.3 - Can't authenticate with YubiKey #521

New Issue

MrUnknownDE · 2026-04-05T17:15:46+02:00

MrUnknownDE commented

2026-04-05 17:15:46 +02:00

Originally created by @c360e5f1 on 12/9/2025

Describe the Bug

I have a YubiKey Security Key NFC with firmware 5.2.6, which supports FIDO2 authentication. When registering a security key, I'm able to save it to my Google Password Manager and this works fine, I can log in using the security key credentials from Google Password Manager, but this isn't ideal because it's not offline

When I try to register my YubiKey, the registration is successful. I made sure to select the correct external USB YubiKey, entered my PIN, and pressed the gold disc. The key was then saved and listed in my security key dialog box. However, when I try to login with this registered YubiKey, even making sure I have the correct one selected, entering my PIN, and pressing the gold disc; I get a "This key doesn't look familiar" error and I can't login.

In all cases, password authentication still works.

Any ideas on where to look, what relevant log files to dig though?

Environment

OS Type & Version: Windows 10 22H2 19045.6466
Pangolin Version: 1.12.3 / Docker
Gerbil Version: 1.3.0 / Docker
Traefik Version: 3.6 / Docker
Newt Version: 1.6.0 / Docker
Olm Version: (if applicable)

To Reproduce

Attach a YubiKey to a Pangolin account
Log out
Attempt to log in with the registered YubiKey
Receive "This security key doesn't look familiar" error message

Expected Behavior

Attach a YubiKey to a Pangolin account
Log out
Attempt to log in with the registered YubiKey
Authentication is successful and user logs in

*Originally created by @c360e5f1 on 12/9/2025* ### Describe the Bug I have a YubiKey Security Key NFC with firmware 5.2.6, which supports FIDO2 authentication. When registering a security key, I'm able to save it to my Google Password Manager and this works fine, I can log in using the security key credentials from Google Password Manager, but this isn't ideal because it's not offline When I try to register my YubiKey, the registration is successful. I made sure to select the correct external USB YubiKey, entered my PIN, and pressed the gold disc. The key was then saved and listed in my security key dialog box. However, when I try to login with this registered YubiKey, even making sure I have the correct one selected, entering my PIN, and pressing the gold disc; I get a "This key doesn't look familiar" error and I can't login. In all cases, password authentication still works. Any ideas on where to look, what relevant log files to dig though? <img width="608" height="453" alt="Image" src="https://github.com/user-attachments/assets/813278c7-f723-4574-b17d-95f14b9be37d" /> <img width="752" height="530" alt="Image" src="https://github.com/user-attachments/assets/d539ad67-6a60-40db-be5a-791d4e5f1992" /> <img width="536" height="426" alt="Image" src="https://github.com/user-attachments/assets/acb85633-7207-4872-8d82-ff2f3f0ec281" /> ### Environment - OS Type & Version: Windows 10 22H2 19045.6466 - Pangolin Version: 1.12.3 / Docker - Gerbil Version: 1.3.0 / Docker - Traefik Version: 3.6 / Docker - Newt Version: 1.6.0 / Docker - Olm Version: (if applicable) ### To Reproduce 1. Attach a YubiKey to a Pangolin account 2. Log out 3. Attempt to log in with the registered YubiKey 4. Receive "This security key doesn't look familiar" error message ### Expected Behavior 1. Attach a YubiKey to a Pangolin account 2. Log out 3. Attempt to log in with the registered YubiKey 4. Authentication is successful and user logs in

MrUnknownDE closed this issue

2026-04-05 17:15:46 +02:00

MrUnknownDE added the authentication needs investigating potential bug needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating labels 2026-04-05 17:15:47 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label authentication needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating potential bug

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#521