use new firefox api for webauthn(FIDO2) ctap2 instead old U2F (fido1) #1810

New Issue

MrUnknownDE · 2026-04-06T02:25:40+02:00

MrUnknownDE commented

2026-04-06 02:25:40 +02:00

Originally created by @rdslw on 1/6/2023

Currently, if using web access, and usb authenticator, and newest chromium (e.g. 108) you can use yubikeys configured with ONLY FIDO2 protocol. The very same key, with the same configuration (being U2F disabled, while FIDO2 enabled), will no work with firefox (tested 108), because web vault is using only U2F firefox api, hence older.

New firefox do have ctap2 protocol visible under setting security.webauthn.ctap2

Yubikey configuration:

$ ykman info                                                                                                                         ~
Device type: YubiKey 5C NFC
Firmware version: 5.4.3
Form factor: Keychain (USB-C)
Enabled USB interfaces: OTP, FIDO, CCID
NFC transport is enabled.

Applications	USB     	NFC     
FIDO2       	Enabled 	Enabled (!)
OTP         	Enabled 	Enabled 	
FIDO U2F    	Disabled	Disabled (!)
OATH        	Enabled 	Enabled 	
YubiHSM Auth	Enabled 	Enabled 	
OpenPGP     	Enabled 	Enabled 	
PIV         	Enabled 	Enabled

*Originally created by @rdslw on 1/6/2023* Currently, if using web access, and usb authenticator, and newest chromium (e.g. 108) you can use yubikeys configured with ONLY FIDO2 protocol. The very same key, with the same configuration (being U2F disabled, while FIDO2 enabled), will no work with firefox (tested 108), because web vault is using only U2F firefox api, hence older. New firefox do have ctap2 protocol visible under setting _security.webauthn.ctap2_ Yubikey configuration: ``` $ ykman info ~ Device type: YubiKey 5C NFC Firmware version: 5.4.3 Form factor: Keychain (USB-C) Enabled USB interfaces: OTP, FIDO, CCID NFC transport is enabled. Applications USB NFC FIDO2 Enabled Enabled (!) OTP Enabled Enabled FIDO U2F Disabled Disabled (!) OATH Enabled Enabled YubiHSM Auth Enabled Enabled OpenPGP Enabled Enabled PIV Enabled Enabled ```

MrUnknownDE closed this issue

2026-04-06 02:25:41 +02:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#1810