# Onlykey not detected in browser when setting up FIDO2 Security Key on ProtonMail

**URL:** https://onlykey.discourse.group/t/onlykey-not-detected-in-browser-when-setting-up-fido2-security-key-on-protonmail/1203
**Category:** Two Factor Authentication
**Created:** [January 11, 2024, 1:51am UTC](https://onlykey.discourse.group/t/onlykey-not-detected-in-browser-when-setting-up-fido2-security-key-on-protonmail/1203 "2024-01-11T01:51:46Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![luke](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@luke](https://onlykey.discourse.group/u/luke)
#### Post date: [January 11, 2024, 1:51am UTC](https://onlykey.discourse.group/t/onlykey-not-detected-in-browser-when-setting-up-fido2-security-key-on-protonmail/1203/1 "2024-01-11T01:51:46Z")

</div>

Hello all, new OnlyKey user here. After configuring my OnlyKey with the Linux app (set a PIN, passphrase, and a test account in one of the slots), I tried to use my OnlyKey in my browser as a security key in ProtonMail.

I’m using LibreWolf (most recent version). During the setup on ProtonMail’s website, I reach the point where a browser pop-up asks me to plug in my security key and touch it. I expect my OnlyKey to light up blue per the documentation, but it does not. Touching it does not enroll it as a security key after the fact.

Anybody else running into similar issues? As far as I can tell:

1. OnlyKey is FIDO2 Certified
2. Proton supports FIDO2 security keys
3. LibreWolf is based on Firefox, which now supports security keys (otherwise I wouldn’t see the popup)

So I don’t understand why it is not working as simply as the documentation says it will. I also tried [https://webauthn.io/](https://webauthn.io/) to test the OnlyKey being detected, but get similar results.

Thanks for the help in advance!

---

<div class="post-metadata">

### Author: ![t11](https://avatars.discourse-cdn.com/v4/letter/t/8e7dd6/32.png) [@t11](https://onlykey.discourse.group/u/t11)
#### Post date: [January 11, 2024, 2:07am UTC](https://onlykey.discourse.group/t/onlykey-not-detected-in-browser-when-setting-up-fido2-security-key-on-protonmail/1203/2 "2024-01-11T02:07:43Z")

</div>

I don’t know much about LibreWolf. Are you able to test on another computer and browser?

---

<div class="post-metadata">

### Author: ![luke](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@luke](https://onlykey.discourse.group/u/luke)
#### Post date: [January 12, 2024, 4:04am UTC](https://onlykey.discourse.group/t/onlykey-not-detected-in-browser-when-setting-up-fido2-security-key-on-protonmail/1203/3 "2024-01-12T04:04:04Z")

</div>

Hi t11,

Yes, I tested the webauthn test website in plain-jane Firefox and my OnlyKey lit up blue and worked as intended. This leads me to think it is a LibreWolf issue. I tried adjusting some settings in the about:config with no real luck.

I may have to move to hardened Firefox as my daily driver for sensitive activities that involve my OnlyKey, and just use LibreWolf for casual browsing.

Hell, I might end up on Brave again. I haven’t tested OnlyKey on Brave and I do have worries about it’s reliance on Chromium, but maybe things have changed in the past year for it.

---

<div class="post-metadata">

### Author: ![t11](https://avatars.discourse-cdn.com/v4/letter/t/8e7dd6/32.png) [@t11](https://onlykey.discourse.group/u/t11)
#### Post date: [January 12, 2024, 5:36pm UTC](https://onlykey.discourse.group/t/onlykey-not-detected-in-browser-when-setting-up-fido2-security-key-on-protonmail/1203/4 "2024-01-12T17:36:10Z")

</div>

I have used Brave with FIDO2 it works fine. Some custom browser like the LibreWolf one might not support FIDO2.

---

<div class="post-metadata">

### Author: ![luke](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@luke](https://onlykey.discourse.group/u/luke)
#### Post date: [February 15, 2024, 4:22am UTC](https://onlykey.discourse.group/t/onlykey-not-detected-in-browser-when-setting-up-fido2-security-key-on-protonmail/1203/5 "2024-02-15T04:22:27Z")

</div>

Update: was recently able to use fido2 on both Brave and LibreWolf in the past week. A recent update to the browser must have fixed it. In any case, I wanted to let everyone know so that these options are out there!

---

<div class="post-metadata">

### Author: ![1992toyotacamry](https://avatars.discourse-cdn.com/v4/letter/1/67e7ee/32.png) [@1992toyotacamry](https://onlykey.discourse.group/u/1992toyotacamry)
#### Post date: [May 2, 2024, 7:40am UTC](https://onlykey.discourse.group/t/onlykey-not-detected-in-browser-when-setting-up-fido2-security-key-on-protonmail/1203/6 "2024-05-02T07:40:17Z")

</div>

hey, i’m having the same problem (fido2, linux, librewolf, proton, CTAP2 enabled in about:config and notification comes up in browser for the key check, working fine on other browsers) but updating the browser hasn’t fixed the issue.

Were you on the flatpak version?

---

<div class="post-metadata">

### Author: ![1992toyotacamry](https://avatars.discourse-cdn.com/v4/letter/1/67e7ee/32.png) [@1992toyotacamry](https://onlykey.discourse.group/u/1992toyotacamry)
#### Post date: [May 2, 2024, 8:26am UTC](https://onlykey.discourse.group/t/onlykey-not-detected-in-browser-when-setting-up-fido2-security-key-on-protonmail/1203/7 "2024-05-02T08:26:30Z")

</div>

…and I worked out my problem- flatpak’s sandboxing.

the solution for flatpak librewolf (or any browser without the permission, i guess) is passing the `--device=all` option when launching the app. I don’t know enough to say whether security key support is worth the tradeoff of giving the browser access to all devices though.

EDIT: the more granular device permissions (dri, input, kvm, shm) were tested, and none worked.
