[GH-ISSUE #598] [Bug] Passkey creation on YubiKey with Chrome via Windows 10 fails #993

Closed
opened 2026-03-14 11:24:00 +03:00 by kerem · 6 comments
Owner

Originally created by @chstdu on GitHub (Feb 19, 2024).
Original GitHub issue: https://github.com/anonaddy/anonaddy/issues/598

Creating a PassKey for unbox.at on my YubiKey via Windows 10 fails. After entering the correct YubiKey PIN and touching the button on the YubiKey, I get following error:
image

Passkeys work on other sites like Google, Microsoft or webauthn.io.

Originally created by @chstdu on GitHub (Feb 19, 2024). Original GitHub issue: https://github.com/anonaddy/anonaddy/issues/598 Creating a PassKey for unbox.at on my YubiKey via Windows 10 fails. After entering the correct YubiKey PIN and touching the button on the YubiKey, I get following error: ![image](https://github.com/anonaddy/anonaddy/assets/1130593/896b6aef-3256-4d07-b8d5-240d0a53e664) Passkeys work on other sites like Google, Microsoft or webauthn.io.
kerem closed this issue 2026-03-14 11:24:05 +03:00
Author
Owner

@chstdu commented on GitHub (Feb 19, 2024):

Especially, they creation process does not fall back to variant 2 "Hardware Security Key (e.g. YubiKey, SoloKey, Nitrokey)". It would be clearer if you could select in advance whether to use variant 2 or variant 3 "Passkeys (which can be stored in a supported provider such as Bitwarden or 1Password)".

<!-- gh-comment-id:1953252724 --> @chstdu commented on GitHub (Feb 19, 2024): Especially, they creation process does not fall back to variant 2 "Hardware Security Key (e.g. YubiKey, SoloKey, Nitrokey)". It would be clearer if you could select in advance whether to use variant 2 or variant 3 "Passkeys (which can be stored in a supported provider such as Bitwarden or 1Password)".
Author
Owner

@willbrowningme commented on GitHub (Feb 20, 2024):

Can this be replicated on the official instance? Also unbox.at must disclose their source code under the AGPL-3.0 license terms.

<!-- gh-comment-id:1954085053 --> @willbrowningme commented on GitHub (Feb 20, 2024): Can this be replicated on the official instance? Also unbox.at must disclose their source code under the [AGPL-3.0 license terms](https://github.com/anonaddy/anonaddy/blob/master/LICENSE.md).
Author
Owner

@chstdu commented on GitHub (Feb 20, 2024):

Thank you for the quick reply. Now I tried it on addy.io again but the same error occurs. Check the attached screen recording.
YubiKey failure.webm

<!-- gh-comment-id:1954962830 --> @chstdu commented on GitHub (Feb 20, 2024): Thank you for the quick reply. Now I tried it on addy.io again but the same error occurs. Check the attached screen recording. [YubiKey failure.webm](https://github.com/anonaddy/anonaddy/assets/1130593/504a0531-3629-45e7-b41e-f3b92ba1361c)
Author
Owner

@willbrowningme commented on GitHub (Feb 21, 2024):

Could you try this demo application of the package I'm using to provide this - https://webauthn.asbin.net/

<!-- gh-comment-id:1956252917 --> @willbrowningme commented on GitHub (Feb 21, 2024): Could you try this demo application of the package I'm using to provide this - https://webauthn.asbin.net/
Author
Owner

@chstdu commented on GitHub (Feb 21, 2024):

Thanks for your investigations. The same error happens there too. See the attached screenshot. It seems that the issue was already reported under https://github.com/asbiin/laravel-webauthn/issues/438 in July 2023 but there is no response so far.

image

<!-- gh-comment-id:1957827246 --> @chstdu commented on GitHub (Feb 21, 2024): Thanks for your investigations. The same error happens there too. See the attached screenshot. It seems that the issue was already reported under https://github.com/asbiin/laravel-webauthn/issues/438 in July 2023 but there is no response so far. ![image](https://github.com/anonaddy/anonaddy/assets/1130593/ef86e5e6-7630-45f3-8353-462d5efe625a)
Author
Owner

@willbrowningme commented on GitHub (Jun 26, 2024):

Closing this issue as it is with a package and not addy.io itself.

<!-- gh-comment-id:2191935529 --> @willbrowningme commented on GitHub (Jun 26, 2024): Closing this issue as it is with a package and not addy.io itself.
Sign in to join this conversation.
No labels
bug
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/anonaddy#993
No description provided.