Yubikey not getting recognized as 2FA for GMail
Categories
(Thunderbird :: Security, defect)
Tracking
(Not tracked)
People
(Reporter: belegdol, Unassigned)
References
(Blocks 1 open bug)
Details
Attachments
(4 files)
Error message under Windows
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0
Steps to reproduce:
I bought a yubico security key and enrolled it with my gmail account.
Actual results:
When attempting to log in to my gmail account from thunderbird, security key is not recognized, even though it works with firefox on the same machine. This appears to affect both Linux and Windows.
Expected results:
Using yubico security key for second factor authentication should work.
|
Reporter | |
Comment 1•2 years ago
|
||
|
||
Comment 2•2 years ago
|
||
Can you try beta? I've heard at least there it works.
|
|
Reporter | |
Comment 3•2 years ago
|
||
I tried 113.0b6 under Linux. It does not work unfortunately.
|
||
Updated•2 years ago
|
Any update on this? The most popular email provider and the most popular 2FA device can't be used with Thunderbird, a fact which should trigger a bigger prioritization for this over the course of 5 months since this has been open. Personally, I have given up on Thunderbird because of this
Comment on attachment 9357847 [details]
Still doesn't work with Gnome45 and TB 119.0b4. But now the "2-Step Verification" window is shown, even my Yubikey starts flashing but after tapping it, nothing happens.
Still doesn't work with Gnome45 and TB 119.0b4. But now the "2-Step Verification" window is shown, even my Yubikey starts flashing but after tapping it, nothing happens. Eventually the Dialog times out.
|
||
Comment 10•2 years ago
|
||
Works for me as of v 120.0b3
|
|
Reporter | |
Comment 11•2 years ago
|
||
It also appears to work in 115.4.1, at least on Fedora 38. I started thunderbird with -profilemanager, created a new profile and was able to complete 2FA challenge with my Yubico security key which did not work previously.
|
||
Comment 12•2 years ago
|
||
Not working with v120.0b3 on macOS. Still getting "Chrome Extension not found" in the Google browser window popup as soon as I connect the Yubikey.
|
|
||
Comment 13•2 years ago
|
||
|
||
Updated•1 year ago
|
|
||
Comment 15•1 year ago
|
||
(In reply to m from comment #12)
Not working with v120.0b3 on macOS. Still getting "Chrome Extension not found" in the Google browser window popup as soon as I connect the Yubikey.
It prompting you for the "chrome extension" indicates that the key is registered using u2f I think - the API that's been removed. You'd want to migrate your key to use webauthn, the newer API. To do so, you should only need to re-add the key in the 2fa settings I think. It's been a while since I switched mine over, so I might be misremembering.
|
||
Comment 16•1 year ago
|
||
I know this issue is about Thunderbird, but I think my case with Firefox is at least related:
Just ran into this with Firefox 123.0.1 (64-bit) when trying to login on google.com with YubiKey as 2fa. While Google was prompting me to authenticate with the YubiKey, the YubiKey itself was not blinking and not recognized.
The same steps in 125.0a1 (2024-03-10) (64-bit) works as expected and I was able to use YubiKey as 2fa for the google.com login.
So while apparently there are certainly issues in both Firefox and Thunderbird (as per this bug) the good news is, nightly is working. For Firefox this means in 1-2 months hopefully the issue should be gone in stable. Not sure if the change will also trickle down to Thunderbird.
Description
•