# Challenge-Response

**URL:** https://onlykey.discourse.group/c/two-factor-authentication/challenge-response/12.md

[Latest](https://onlykey.discourse.group/latest.md) · [Categories](https://onlykey.discourse.group/categories.md)

---

## [About the Challenge-Response category](https://onlykey.discourse.group/t/about-the-challenge-response-category/271)

<div class="topic-metadata">

**Author:** [@t11](https://onlykey.discourse.group/u/t11)\
**Replies:** 0

</div>

---

## [Log in works fine when used with Chrome but not for Firefox. Any idea how to solve?](https://onlykey.discourse.group/t/log-in-works-fine-when-used-with-chrome-but-not-for-firefox-any-idea-how-to-solve/1572)

<div class="topic-metadata">

**Author:** [@carlo.albrile](https://onlykey.discourse.group/u/carlo.albrile)\
**Replies:** 1\
**Last updated:** [October 1, 2026, 10:00pm UTC](https://onlykey.discourse.group/t/log-in-works-fine-when-used-with-chrome-but-not-for-firefox-any-idea-how-to-solve/1572 "2026-10-01T22:00:52Z")

</div>

Within Onlykey I have set up login information in ‘Full Configuration (Advanced)’. Log in works fine when used with Chrome but not for Firefox. Any idea how to solve? Linux Mint 22.1 Xia base: Ubuntu 24.04 noblen Firef…

---

## [KeepassXC: HMAC mismatch when saving KeepassXC database after OnlyKey timeout (kinda SOLVED)](https://onlykey.discourse.group/t/keepassxc-hmac-mismatch-when-saving-keepassxc-database-after-onlykey-timeout-kinda-solved/270)

<div class="topic-metadata">

**Author:** [@ZorgroZ](https://onlykey.discourse.group/u/ZorgroZ)\
**Replies:** 9\
**Last updated:** [March 2, 2025, 6:44pm UTC](https://onlykey.discourse.group/t/keepassxc-hmac-mismatch-when-saving-keepassxc-database-after-onlykey-timeout-kinda-solved/270 "2025-03-02T18:44:58Z")

</div>

It happened again: “HMAC mismatch” when unlocking KeepassXC database with my OnlyKey as hardware key. Update: Please see my latest post below for the probable issue (saving KeepassXC database after inactivity timeout of…

---

## [OKey Duo with Protonmail not working on Firefox](https://onlykey.discourse.group/t/okey-duo-with-protonmail-not-working-on-firefox/1215)

<div class="topic-metadata">

**Author:** [@lebor](https://onlykey.discourse.group/u/lebor)\
**Replies:** 5\
**Last updated:** [February 8, 2025, 3:41am UTC](https://onlykey.discourse.group/t/okey-duo-with-protonmail-not-working-on-firefox/1215 "2025-02-08T03:41:40Z")

</div>

Hi, I used to use Okey Duo with Protonmail on Firefox just fine. However now I am not able to auth using it. The pop up window that appears when I attempt to sign in has changed. It now asks for iphone, ipad, android d…

---

## [Always handles as a pressed button](https://onlykey.discourse.group/t/always-handles-as-a-pressed-button/1248)

<div class="topic-metadata">

**Author:** [@kotikov](https://onlykey.discourse.group/u/kotikov)\
**Replies:** 0\
**Last updated:** [March 25, 2024, 12:04am UTC](https://onlykey.discourse.group/t/always-handles-as-a-pressed-button/1248 "2024-03-25T00:04:40Z")

</div>

I set the " HMAC User Input Mode\*\*" setting to yes, but despite this, keepassx unlocks my database without pressing a button on my onlykey. I did a full reset, but it didn’t help. keepassx - 2.7.7 App v5.3.6 OnlyKey v…

---

## [Issues with MBP Monterey and Safari 15.5 on osx Monterey](https://onlykey.discourse.group/t/issues-with-mbp-monterey-and-safari-15-5-on-osx-monterey/798)

<div class="topic-metadata">

**Author:** [@vjoomens](https://onlykey.discourse.group/u/vjoomens)\
**Replies:** 2\
**Last updated:** [November 23, 2022, 1:58pm UTC](https://onlykey.discourse.group/t/issues-with-mbp-monterey-and-safari-15-5-on-osx-monterey/798 "2022-11-23T13:58:22Z")

</div>

Hi, u2f doesn’t work at all on Safari / Monterey / M1 Pro. Firefox on same machine does work fine. Tried: apps.crp.to (no response at all) demo.yubico.com (registration success, auth no) AWS console (registration suc…

---

## [Can't configure the challenge-response with onlykey-cli](https://onlykey.discourse.group/t/cant-configure-the-challenge-response-with-onlykey-cli/306)

<div class="topic-metadata">

**Author:** [@knlr0m1](https://onlykey.discourse.group/u/knlr0m1)\
**Replies:** 14\
**Last updated:** [April 29, 2022, 3:46pm UTC](https://onlykey.discourse.group/t/cant-configure-the-challenge-response-with-onlykey-cli/306 "2022-04-29T15:46:11Z")

</div>

I would like to use my OnlyKey as a replacement for my two YubiKey. I use the challenge-response to unlock my KeePassXC database. I can’t set my OnlyKey. I followed this tuto: I generate my key: $ openssl rand -hex 2…

---

## [OnlyKey App not setting time on OnlyKey Duo](https://onlykey.discourse.group/t/onlykey-app-not-setting-time-on-onlykey-duo/683)

<div class="topic-metadata">

**Author:** [@akraut](https://onlykey.discourse.group/u/akraut)\
**Replies:** 2\
**Last updated:** [April 14, 2022, 4:39pm UTC](https://onlykey.discourse.group/t/onlykey-app-not-setting-time-on-onlykey-duo/683 "2022-04-14T16:39:40Z")

</div>

I’m running the OnlyKey App on Mac OS and OATH-TOTP codes are returning NOTSET each time. Restarting the app after unlocking fixes this.

---

## [Webauthn (u2f) implementers require the device attestation certificate](https://onlykey.discourse.group/t/webauthn-u2f-implementers-require-the-device-attestation-certificate/443)

<div class="topic-metadata">

**Author:** [@chris](https://onlykey.discourse.group/u/chris)\
**Replies:** 6\
**Last updated:** [July 15, 2021, 11:12am UTC](https://onlykey.discourse.group/t/webauthn-u2f-implementers-require-the-device-attestation-certificate/443 "2021-07-15T11:12:46Z")

</div>

Please let me know If not the correct place, it wasn’t clear where a Webauthn topic is most appropriate. As the topic suggests, I’m implementing Webauthn, which allows devices that support u2f to authenticate. OnlyKey s…

---

## [Multiple OnlyKeys can be used for KeepassXC challenge-response?](https://onlykey.discourse.group/t/multiple-onlykeys-can-be-used-for-keepassxc-challenge-response/267)

<div class="topic-metadata">

**Author:** [@ZorgroZ](https://onlykey.discourse.group/u/ZorgroZ)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 5:57pm UTC](https://onlykey.discourse.group/t/multiple-onlykeys-can-be-used-for-keepassxc-challenge-response/267 "2021-03-11T17:57:13Z")

</div>

I have two OnlyKeys: “OnlyKey 1” has a few slots set, and is configured as hardware key for my KeepassXC database. The second key, “OnlyKey 2” has just been initialized, but is otherwise empty. KeepassXC authenticatio…

---

## [KeepassXC: HMAC mismatch after restoring new backup file](https://onlykey.discourse.group/t/keepassxc-hmac-mismatch-after-restoring-new-backup-file/269)

<div class="topic-metadata">

**Author:** [@ZorgroZ](https://onlykey.discourse.group/u/ZorgroZ)\
**Replies:** 4\
**Last updated:** [March 11, 2021, 5:46pm UTC](https://onlykey.discourse.group/t/keepassxc-hmac-mismatch-after-restoring-new-backup-file/269 "2021-03-11T17:46:52Z")

</div>

Suddenly I am getting an “HMAC mismatch” when trying to unlock my KeepassXC database with the same Onlykey that worked a few hours ago. What could cause this? Could reflashing the firmware or restoring a backup have an…
