nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

MFA and passwordless login

douglas.lowenthal

I set up a Yubikey 5 for MFA on my laptop. It works but not with passwordless login. I have to enter my master password to get it to authenticate either with the Yubikey or the Authenticator, which is also enabled. I checked the Yubikey on my iPhone 11 with NFC and it works. However, with or without faceid, it goes to Authenticator and doesn’t respond to the Yubikey. So, LP provide an option for choosing Authenticator on the iPhone or Yubikey in the laptop for MFA on the laptop but defaults to Authenticator when logging in on the iphone.

Find more posts tagged with

Accepted answers

ahudspeth

Is your default MFA option in Multifactor set to Yubikey or Authenticator? Check and change it, see if that helps any.

All comments

douglas.lowenthal

I set up Yubikey after Authenticator and Authenticator was the default until I changed it to Yubikey.

douglas.lowenthal

Good news and bad news.

Good: with Yubikey and Authenticator enabled as MFA and Yubikey selected as default. On iPhone 11Pro, FaceID enabled for LP login, the FaceID let’s me log in and it gives the choice of Yubikey or other (in this case, Authenticator) for MFA and both work.

Bad: with same settings as above (Yubikey default), LP will not allow me to set passwordless login. I must type in my master PW, after which the option is presented to use the Yubikey or Authenticator for MFA.

After all the hoopla about passwordless login, it is ironic that LP won’t let you use it when the Yubikey, which can only be used with premium accounts, is enabled for MFA. This could be a LP bug, a browser issue (Firefox in my case) or Windows 10.

This works out pretty well for me as I access LP mainly from my phone, however, unless the Authenticator app stops working, the Yubikey is unnecessary. The Yubikey becomes a good option for a desktop or laptop when the phone becomes unavailable.

Another minor bad: when I go into account settings on my laptop, with the display on the highest resolution, I can’t display to the bottom of the MFA page with the scroll bar where the default MFA is set. I had to use a desktop.

P.S. I just discovered a fix for the screen problem. In Firefox, under view, just zoom out twice and the entire MFA is viewable.

dabonz1965

Yes it is defaulted

https://prnt.sc/6m3BiCa-8hOO<<<<< Screenshot

douglas.lowenthal

I think I've found the problem with passwordless login with a Yubikey on a desktop in a support article: "Support for using desktop biometrics and security keys is coming soon!"