# Requiring pins on only key duo doesn't work

**URL:** <https://onlykey.discourse.group/t/requiring-pins-on-only-key-duo-doesnt-work/1133>\
**Category:** SSH, OpenPGP, GPG\
**Created:** [August 8, 2023, 2:48pm UTC](https://onlykey.discourse.group/t/requiring-pins-on-only-key-duo-doesnt-work/1133 "2023-08-08T14:48:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![wrin](https://avatars.discourse-cdn.com/v4/letter/w/f14d63/32.png) [@wrin](https://onlykey.discourse.group/u/wrin)\
**Post date:** [August 8, 2023, 2:48pm UTC](https://onlykey.discourse.group/t/requiring-pins-on-only-key-duo-doesnt-work/1133/1 "2023-08-08T14:48:50Z")

</div>

I’m trying to test if the only key duo can use my pgp keys, but both the agent and the webcrypt askfor a pin you cannot actually enter anywhere. The duo only has 3 buttons, so typing a 4 or a 6 isn’t an option. The agent seems happy with a button press at times.

Can this please be fixed?

---

<div class="post-metadata">

**Author:** ![0x3b0b](https://avatars.discourse-cdn.com/v4/letter/0/65b543/32.png) [@0x3b0b](https://onlykey.discourse.group/u/0x3b0b)\
**Post date:** [August 12, 2023, 4:22am UTC](https://onlykey.discourse.group/t/requiring-pins-on-only-key-duo-doesnt-work/1133/2 "2023-08-12T04:22:41Z")

</div>

> **[OnlyKey Features | Docs](https://docs.onlykey.io/features.html#button-definitions)**
>
> Detailed information on OnlyKey Features

> PIN may be entered via OnlyKey App or by physical touch. Touch buttons 1, 2, 3 to enter 1, 2, 3 and hold (for 1 second) buttons 1, 2, 3 to enter 4, 5, 6.

---

<div class="post-metadata">

**Author:** ![t11](https://avatars.discourse-cdn.com/v4/letter/t/8e7dd6/32.png) [@t11](https://onlykey.discourse.group/u/t11)\
**Post date:** [August 14, 2023, 6:13pm UTC](https://onlykey.discourse.group/t/requiring-pins-on-only-key-duo-doesnt-work/1133/3 "2023-08-14T18:13:40Z")

</div>

The default is no challenge PIN on OnlyKey DUO. So yes just a single press is required. You can enable the challenge PIN but entry can be tricky as mentioned above you have to hold to enter 4, 5, or 6.

---

<div class="post-metadata">

**Author:** ![phh](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@phh](https://onlykey.discourse.group/u/phh)\
**Post date:** [October 9, 2024, 10:05am UTC](https://onlykey.discourse.group/t/requiring-pins-on-only-key-duo-doesnt-work/1133/4 "2024-10-09T10:05:32Z")

</div>

I can’t get 4/5/6 to work when entering challenges (and I do want to keep the challenge)  
To be able to tell whether long press had any effect, I did a long-press when challenge was requesting 1/2/3, and it passed!  
Like if it was requesting a 1, I tried doing a 4, and it accepted that digit. Meaning it interpreted it as a 1.  
I’ve checked that the long-press are proper long-press: It accepts a digit only on the release of the button, and if I press 10s, it waits 10s before giving the error.  
I tried varying press-length, I tried to be precise around 1s. I tried 3s. I tried stupidly high like 10s.

Any idea what I could be doing wrong?  
That’s on v3.0.4-prodp firmware

Edit: FWIW, I’d rather have the challenge only use 1,2,3; no 4,5,6. Blind PR of it at [Have challenges only require 1,2,3 on DUO. Security is enough that way by phhusson · Pull Request #27 · trustcrypto/libraries · GitHub](https://github.com/trustcrypto/libraries/pull/27)  
Edit2: Just saw that GPG doesn’t support challenges, which will be in my use-cases, and since we don’t have a per-key setting, well I guess I’ll need to disable challenges anyway