# Two Factor Authentication

**URL:** https://onlykey.discourse.group/c/two-factor-authentication/9.md

[Latest](https://onlykey.discourse.group/latest.md) · [Categories](https://onlykey.discourse.group/categories.md)

---

## [About the Two Factor Authentication category](https://onlykey.discourse.group/t/about-the-two-factor-authentication-category/16)

<div class="topic-metadata">

**Author:** [@t11](https://onlykey.discourse.group/u/t11)\
**Replies:** 1\
**Last updated:** [March 5, 2021, 12:35pm UTC](https://onlykey.discourse.group/t/about-the-two-factor-authentication-category/16 "2021-03-05T12:35:17Z")

</div>

Discussion and support for using OnlyKey for 2FA. See Security Key (FIDO2 / U2F), OAUTH TOTP, Yubico OTP, and Challenge-Response.

---

## [OnlyKey on Steam Deck](https://onlykey.discourse.group/t/onlykey-on-steam-deck/1525)

<div class="topic-metadata">

**Author:** [@Jenna.Davies](https://onlykey.discourse.group/u/Jenna.Davies)\
**Replies:** 0\
**Last updated:** [January 18, 2026, 4:45pm UTC](https://onlykey.discourse.group/t/onlykey-on-steam-deck/1525 "2026-01-18T16:45:59Z")

</div>

I asked ChatGPT to suggest a hardware key that could be used to provide TOTP to unlock my Steam account on my SteamDeck (The steam account credentials unlock the device itself, not merely the steam application). I’ll pas…

---

## [WebAuthN Not Working on Restore](https://onlykey.discourse.group/t/webauthn-not-working-on-restore/1506)

<div class="topic-metadata">

**Author:** [@adam](https://onlykey.discourse.group/u/adam)\
**Replies:** 2\
**Last updated:** [October 30, 2025, 2:39pm UTC](https://onlykey.discourse.group/t/webauthn-not-working-on-restore/1506 "2025-10-30T14:39:11Z")

</div>

Hi All, I have two OnlyKeys. I have one OnlyKey I use as a primary which I backup and restore to a second OnlyKey that I keep for recovery purposes in the event that the first OnlyKey is ever lost of fails. I only ever…

---

## [Being locked out of FIDO2 function, other functions work fine](https://onlykey.discourse.group/t/being-locked-out-of-fido2-function-other-functions-work-fine/1478)

<div class="topic-metadata">

**Author:** [@anttna](https://onlykey.discourse.group/u/anttna)\
**Replies:** 2\
**Last updated:** [August 1, 2025, 4:08pm UTC](https://onlykey.discourse.group/t/being-locked-out-of-fido2-function-other-functions-work-fine/1478 "2025-08-01T16:08:49Z")

</div>

I have been using onlykey’s FIDO2 function fine for several years (website login, ed25519-sk ssh keys). I don’t have an onlykey FIDO2 PIN (and I am not even sure if I can set one). Usually for website login, I chose FIDO…

---

## [TOTP - Secret Value](https://onlykey.discourse.group/t/totp-secret-value/1483)

<div class="topic-metadata">

**Author:** [@killerbabe8000](https://onlykey.discourse.group/u/killerbabe8000)\
**Replies:** 2\
**Last updated:** [July 21, 2025, 11:56pm UTC](https://onlykey.discourse.group/t/totp-secret-value/1483 "2025-07-21T23:56:49Z")

</div>

Hi there, is there a way to get the Secret Value again, after it is entered and saved? I havent found anything about it… Best regards from Germany

---

## [OnlyKey not working if not unlocked before browser request](https://onlykey.discourse.group/t/onlykey-not-working-if-not-unlocked-before-browser-request/1466)

<div class="topic-metadata">

**Author:** [@Only\_M](https://onlykey.discourse.group/u/Only_M)\
**Replies:** 0\
**Last updated:** [June 6, 2025, 6:19pm UTC](https://onlykey.discourse.group/t/onlykey-not-working-if-not-unlocked-before-browser-request/1466 "2025-06-06T18:19:58Z")

</div>

I have had my OnlyKey for a long time but hadn’t used it much lately. I brought it out to start using it again but I am experiencing an annoying issue. If the OnlyKey is not unlocked before the browser requests the chal…

---

## [TOTP Time Sync Issue](https://onlykey.discourse.group/t/totp-time-sync-issue/1452)

<div class="topic-metadata">

**Author:** [@jj11](https://onlykey.discourse.group/u/jj11)\
**Replies:** 4\
**Last updated:** [May 23, 2025, 7:30am UTC](https://onlykey.discourse.group/t/totp-time-sync-issue/1452 "2025-05-23T07:30:25Z")

</div>

Hi Everyone, I have an issue with TOTP on my Onlykey it seems on my desktop PC it wont sync the time correctly, I have tried using the windows app, https://apps.crp.to/ and the CLI but OTP’s always fail to work. Intere…

---

## [Difficulty getting some websites to recognize OnlyKeys](https://onlykey.discourse.group/t/difficulty-getting-some-websites-to-recognize-onlykeys/1422)

<div class="topic-metadata">

**Author:** [@Expat01](https://onlykey.discourse.group/u/Expat01)\
**Replies:** 16\
**Last updated:** [March 5, 2025, 6:58pm UTC](https://onlykey.discourse.group/t/difficulty-getting-some-websites-to-recognize-onlykeys/1422 "2025-03-05T18:58:25Z")

</div>

I’ve read some users have had trouble using OnlyKey with Protonmail. I’m also having trouble (just FIDO) getting Protonmail to recognize OnlyKey. I keep getting an error message (“Incorrect login credentials. Please try …

---

## [KeepassXC: HMAC mismatch when saving KeepassXC database after OnlyKey timeout (kinda SOLVED)](https://onlykey.discourse.group/t/keepassxc-hmac-mismatch-when-saving-keepassxc-database-after-onlykey-timeout-kinda-solved/270)

<div class="topic-metadata">

**Author:** [@ZorgroZ](https://onlykey.discourse.group/u/ZorgroZ)\
**Replies:** 9\
**Last updated:** [March 2, 2025, 6:44pm UTC](https://onlykey.discourse.group/t/keepassxc-hmac-mismatch-when-saving-keepassxc-database-after-onlykey-timeout-kinda-solved/270 "2025-03-02T18:44:58Z")

</div>

It happened again: “HMAC mismatch” when unlocking KeepassXC database with my OnlyKey as hardware key. Update: Please see my latest post below for the probable issue (saving KeepassXC database after inactivity timeout of…

---

## [OnlyKey as Security Key on OS X](https://onlykey.discourse.group/t/onlykey-as-security-key-on-os-x/1427)

<div class="topic-metadata">

**Author:** [@TinyMarmot](https://onlykey.discourse.group/u/TinyMarmot)\
**Replies:** 5\
**Last updated:** [February 17, 2025, 8:26am UTC](https://onlykey.discourse.group/t/onlykey-as-security-key-on-os-x/1427 "2025-02-17T08:26:35Z")

</div>

Hello everyone, I am a fresh user of onlykey. I tried to use the OnlyKey on OS X as a security key, and the OS doesn’t detect my key. I always stay on the screen insert and activate your security key translation of …

---

## [Brave web extension](https://onlykey.discourse.group/t/brave-web-extension/1424)

<div class="topic-metadata">

**Author:** [@TinyMarmot](https://onlykey.discourse.group/u/TinyMarmot)\
**Replies:** 2\
**Last updated:** [February 13, 2025, 9:13am UTC](https://onlykey.discourse.group/t/brave-web-extension/1424 "2025-02-13T09:13:41Z")

</div>

Hi everybody, I am a fresh owner of OnlyKey and I see in the documentation that the brave browser is supported. But when I try to install the extension from the chrome webstore, it tells me that the application is not C…

---

## [OKey Duo with Protonmail not working on Firefox](https://onlykey.discourse.group/t/okey-duo-with-protonmail-not-working-on-firefox/1215)

<div class="topic-metadata">

**Author:** [@lebor](https://onlykey.discourse.group/u/lebor)\
**Replies:** 5\
**Last updated:** [February 8, 2025, 3:41am UTC](https://onlykey.discourse.group/t/okey-duo-with-protonmail-not-working-on-firefox/1215 "2025-02-08T03:41:40Z")

</div>

Hi, I used to use Okey Duo with Protonmail on Firefox just fine. However now I am not able to auth using it. The pop up window that appears when I attempt to sign in has changed. It now asks for iphone, ipad, android d…

---

## [Resident credential backup](https://onlykey.discourse.group/t/resident-credential-backup/1418)

<div class="topic-metadata">

**Author:** [@MLS69](https://onlykey.discourse.group/u/MLS69)\
**Replies:** 0\
**Last updated:** [January 28, 2025, 4:46pm UTC](https://onlykey.discourse.group/t/resident-credential-backup/1418 "2025-01-28T16:46:09Z")

</div>

Hi. I think it would be great if you could selectively export and import (encrypted ) FIDO2 resident credentials. This would also provide a physical backup that you could print and manually import if needed. Same for…

---

## [U2F key invalidated if registered for different services](https://onlykey.discourse.group/t/u2f-key-invalidated-if-registered-for-different-services/1377)

<div class="topic-metadata">

**Author:** [@Hadr](https://onlykey.discourse.group/u/Hadr)\
**Replies:** 11\
**Last updated:** [November 26, 2024, 6:09pm UTC](https://onlykey.discourse.group/t/u2f-key-invalidated-if-registered-for-different-services/1377 "2024-11-26T18:09:28Z")

</div>

Hello, Is it normal that my key no longer works as 2FA when I register it on another service. In my case, I have it registered to 2FA on service A. But the moment I register it for service B, it is no longer recognized …

---

## [Manjaro - OnlyKey can't interact with apps](https://onlykey.discourse.group/t/manjaro-onlykey-cant-interact-with-apps/1385)

<div class="topic-metadata">

**Author:** [@dconlykey](https://onlykey.discourse.group/u/dconlykey)\
**Replies:** 6\
**Last updated:** [November 18, 2024, 7:10pm UTC](https://onlykey.discourse.group/t/manjaro-onlykey-cant-interact-with-apps/1385 "2024-11-18T19:10:39Z")

</div>

First time poster, i own 3 keys. Love them :slight\_smile: On my Manjaro Linux computer, the OnlyKey app, as well as browsers, have stopped recognizing OnlyKeys. OnlyKey can type passwords, but it cannot connect to the…

---

## [iCloud Hardware Token](https://onlykey.discourse.group/t/icloud-hardware-token/1336)

<div class="topic-metadata">

**Author:** [@akraut](https://onlykey.discourse.group/u/akraut)\
**Replies:** 2\
**Last updated:** [August 15, 2024, 6:08pm UTC](https://onlykey.discourse.group/t/icloud-hardware-token/1336 "2024-08-15T18:08:25Z")

</div>

I was trying to setup my Onlykey as a hardware token for iCloud. It recognized it and made the OK blink blue, then I tapped the button, it then asked for a pin. What do I enter here?

---

## [Onlykey not backing up the U2F](https://onlykey.discourse.group/t/onlykey-not-backing-up-the-u2f/1329)

<div class="topic-metadata">

**Author:** [@flame](https://onlykey.discourse.group/u/flame)\
**Replies:** 2\
**Last updated:** [August 12, 2024, 6:15pm UTC](https://onlykey.discourse.group/t/onlykey-not-backing-up-the-u2f/1329 "2024-08-12T18:15:53Z")

</div>

Hello, I have been using onlykey for past few years and just recently decided to try and use it as U2F. I first tried it on proton mail, and it works fine. However, when I backed up the onlykey and restore it to my bac…

---

## [FIDO key enroll without touch](https://onlykey.discourse.group/t/fido-key-enroll-without-touch/1316)

<div class="topic-metadata">

**Author:** [@mfg](https://onlykey.discourse.group/u/mfg)\
**Replies:** 1\
**Last updated:** [July 30, 2024, 5:23pm UTC](https://onlykey.discourse.group/t/fido-key-enroll-without-touch/1316 "2024-07-30T17:23:54Z")

</div>

Hello, is it possible to enroll a fido key without touch ? I would like to use onlykey on a bastion host, with ed25519-sk keys. And have the users generate the keys ssh-keygen -t ed25519-sk -O no-touch-required -f ~…

---

## [F40 or D12 + browser = 2FA challenge not working](https://onlykey.discourse.group/t/f40-or-d12-browser-2fa-challenge-not-working/1314)

<div class="topic-metadata">

**Author:** [@jsmith](https://onlykey.discourse.group/u/jsmith)\
**Replies:** 2\
**Last updated:** [July 24, 2024, 5:17am UTC](https://onlykey.discourse.group/t/f40-or-d12-browser-2fa-challenge-not-working/1314 "2024-07-24T05:17:15Z")

</div>

Take for example using ONLYKEY for 2FA ‘hardware key’ with Gmail. On Fedora 38 all is good. The pop up comes up, in Firefox or Chrome, the blue light flashes, push the button, and the challenge is complete. Not so on…

---

## [I can no longer add passkeys to my Onlykey Duo](https://onlykey.discourse.group/t/i-can-no-longer-add-passkeys-to-my-onlykey-duo/1232)

<div class="topic-metadata">

**Author:** [@wishy](https://onlykey.discourse.group/u/wishy)\
**Replies:** 1\
**Last updated:** [July 22, 2024, 6:21am UTC](https://onlykey.discourse.group/t/i-can-no-longer-add-passkeys-to-my-onlykey-duo/1232 "2024-07-22T06:21:32Z")

</div>

I have many accounts, and I figured I would upgrade all of them to have passkey support, however I noticed that now I can no longer add new ones, and I have no idea how many are registered or if there are duplicates th…

---

## [I am ready to return both of my OnlyKeys!](https://onlykey.discourse.group/t/i-am-ready-to-return-both-of-my-onlykeys/1292)

<div class="topic-metadata">

**Author:** [@jeff](https://onlykey.discourse.group/u/jeff)\
**Replies:** 2\
**Last updated:** [June 17, 2024, 8:15pm UTC](https://onlykey.discourse.group/t/i-am-ready-to-return-both-of-my-onlykeys/1292 "2024-06-17T20:15:13Z")

</div>

I bought the OnlyKey a couple of weeks ago to use with logging into my Bank Of America website. After setting a 10-digit PIN for the key, I set up my login info in Slot a1. It successfully passed my username and passwo…

---

## [Which clock does Onlykey App on Linux use for TOTP?](https://onlykey.discourse.group/t/which-clock-does-onlykey-app-on-linux-use-for-totp/1285)

<div class="topic-metadata">

**Author:** [@cla](https://onlykey.discourse.group/u/cla)\
**Replies:** 0\
**Last updated:** [May 21, 2024, 4:29pm UTC](https://onlykey.discourse.group/t/which-clock-does-onlykey-app-on-linux-use-for-totp/1285 "2024-05-21T16:29:21Z")

</div>

I ran into issues with my OATH-TOTP codes not getting accepted. Some investigation brought to light that my computer’s RTC/Hardware time was way off (2 minutes lagging). However, that was ONLY my RTC/Hardware clock. My s…

---

## [Onlykey not detected in browser when setting up FIDO2 Security Key on ProtonMail](https://onlykey.discourse.group/t/onlykey-not-detected-in-browser-when-setting-up-fido2-security-key-on-protonmail/1203)

<div class="topic-metadata">

**Author:** [@luke](https://onlykey.discourse.group/u/luke)\
**Replies:** 6\
**Last updated:** [May 2, 2024, 8:26am UTC](https://onlykey.discourse.group/t/onlykey-not-detected-in-browser-when-setting-up-fido2-security-key-on-protonmail/1203 "2024-05-02T08:26:30Z")

</div>

Hello all, new OnlyKey user here. After configuring my OnlyKey with the Linux app (set a PIN, passphrase, and a test account in one of the slots), I tried to use my OnlyKey in my browser as a security key in ProtonMail. …

---

## [Always handles as a pressed button](https://onlykey.discourse.group/t/always-handles-as-a-pressed-button/1248)

<div class="topic-metadata">

**Author:** [@kotikov](https://onlykey.discourse.group/u/kotikov)\
**Replies:** 0\
**Last updated:** [March 25, 2024, 12:04am UTC](https://onlykey.discourse.group/t/always-handles-as-a-pressed-button/1248 "2024-03-25T00:04:40Z")

</div>

I set the " HMAC User Input Mode\*\*" setting to yes, but despite this, keepassx unlocks my database without pressing a button on my onlykey. I did a full reset, but it didn’t help. keepassx - 2.7.7 App v5.3.6 OnlyKey v…

---

## [FIDO disable response](https://onlykey.discourse.group/t/fido-disable-response/1228)

<div class="topic-metadata">

**Author:** [@MLS69](https://onlykey.discourse.group/u/MLS69)\
**Replies:** 0\
**Last updated:** [February 26, 2024, 11:00pm UTC](https://onlykey.discourse.group/t/fido-disable-response/1228 "2024-02-26T23:00:05Z")

</div>

Is there a way to disable U2F/FIDO2 interface on the OnlyKey as there is for Yubikey? I have no FIDO credentials, resident or non-resident, yet one of my OnlyKeys flashes upon FIDO challenge. This occurs regardless of …

---

## [Problem setting Onlykey duo to register with Windows Hello](https://onlykey.discourse.group/t/problem-setting-onlykey-duo-to-register-with-windows-hello/731)

<div class="topic-metadata">

**Author:** [@Sceletus](https://onlykey.discourse.group/u/Sceletus)\
**Replies:** 6\
**Last updated:** [February 21, 2024, 2:01am UTC](https://onlykey.discourse.group/t/problem-setting-onlykey-duo-to-register-with-windows-hello/731 "2024-02-21T02:01:21Z")

</div>

I just got my Onlykey duo and I’m trying to setup Windows Hello to use it. The process is not clear. I managed to have something where Windows was doing something (Wait icon for 5s) , then entering a loop where windows …

---

## [U2F recognition](https://onlykey.discourse.group/t/u2f-recognition/1150)

<div class="topic-metadata">

**Author:** [@MLS69](https://onlykey.discourse.group/u/MLS69)\
**Replies:** 1\
**Last updated:** [February 20, 2024, 8:57pm UTC](https://onlykey.discourse.group/t/u2f-recognition/1150 "2024-02-20T20:57:21Z")

</div>

Hello. What makes an OnlyKey recognized by a website while other OnlyKeys are not? In my example I have a Yubikey and OnlyKey plugged in (and unlocked). Only the Yubikey is registered to website A, not any OnlyKey. Fo…

---

## [Yubico OTP best practices](https://onlykey.discourse.group/t/yubico-otp-best-practices/1218)

<div class="topic-metadata">

**Author:** [@uqzjur](https://onlykey.discourse.group/u/uqzjur)\
**Replies:** 0\
**Last updated:** [February 6, 2024, 9:04pm UTC](https://onlykey.discourse.group/t/yubico-otp-best-practices/1218 "2024-02-06T21:04:16Z")

</div>

I got an onlykey and didn’t realize that password generation didn’t occur on the device; also to use Yubico OTP I had to install the yubikey personalization gui in my linux software repository, which is supposedly safe, …

---

## [Fido2 on the duo](https://onlykey.discourse.group/t/fido2-on-the-duo/1207)

<div class="topic-metadata">

**Author:** [@willb0t](https://onlykey.discourse.group/u/willb0t)\
**Replies:** 2\
**Last updated:** [January 22, 2024, 5:18pm UTC](https://onlykey.discourse.group/t/fido2-on-the-duo/1207 "2024-01-22T17:18:12Z")

</div>

fido2 not working with Amazon AWS is there a fix?

---

## [Issue(s): Yubikey OTP Not Working With Firefox](https://onlykey.discourse.group/t/issue-s-yubikey-otp-not-working-with-firefox/1200)

<div class="topic-metadata">

**Author:** [@skfjije](https://onlykey.discourse.group/u/skfjije)\
**Replies:** 2\
**Last updated:** [January 11, 2024, 1:02pm UTC](https://onlykey.discourse.group/t/issue-s-yubikey-otp-not-working-with-firefox/1200 "2024-01-11T13:02:42Z")

</div>

Hi there, I use my OnlyKey from a long time now, but from a couple of weeks, the Yubikey OTP stopped working properly and I have a password request Anyone can help me to solve this issue ? Os: Arch Linux 6.5.13-ha…

[Next page](https://onlykey.discourse.group/c/two-factor-authentication/9.md?page=1)
