Skip to content
Open
Show file tree
Hide file tree
Changes from 3 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 6 additions & 26 deletions source/components/nitrokeys/features/fido2/nitrophone.rst
Original file line number Diff line number Diff line change
Expand Up @@ -4,33 +4,13 @@ FIDO2 on Android / NitroPhone
.. Note::
For more information about FIDO2, FIDO2 U2F and Passkeys, check our `blog article <https://www.nitrokey.com/blog/2022/fido2-webauthn-passkeys-2022-and-2023>`_.

In order to use FIDO2 on GrapheneOS you need to install the Google Play services via GrapheneOS App Store.

.. Note::
You don't have to grant Play services the network permission in order for FIDO2 to work.

.. important::
Play services do not support PIN functionality over NFC.
Comment thread
alexgithublab marked this conversation as resolved.

Multi-Factor Authentication With FIDO2, FIDO U2F
################################################

Registration and sign-in works seamlessly with USB and NFC, in Vanadium and in apps. No further steps are required.

FIDO2 Passkeys
##############

**If no third-party autofill service is enabled:**

Signing in with passkeys and Vanadium should work without having to change any settings.

**If a third-party autofill service is enabled:**
In order to use passkeys being stored on a Nitrokey with your NitroPhone we recommend using the open source app `Authnkey <https://f-droid.org/en/packages/pl.lebihan.authnkey/>`_. Alternatively you could use Google Play Services.

Disable Vanadium's support for passkeys with password managers by changing an experimental setting:
Once Authnkey is installed on your NitroPhone you will need to launch it and set it as the default passkey provider with the "Enable" button and switch Authnkey as your preferred service. When this is done your NitroPhone will be ready to use your Nitrokey and FIDO2. Both NFC and USB connectivity works. You can test this with `WebAuthn.io <https://webauthn.io/>`_.

1. In the address bar, type: ``chrome://flags`` and press enter.
2. In the search bar, type "passkeys".
3. A setting called "Android Credential Management for passkeys" will appear. Change this setting to "Disabled".
4. Select "Relaunch".
Authnkey also comes with useful features such as:

In order to test if FIDO2 works on your Android / NitroPhone you can use `WebAuthn.io <https://webauthn.io/>`_.
- Show the Nitrokey status with its attributes.
Comment thread
alexgithublab marked this conversation as resolved.
Outdated
- List saved credentials.
- Change the FIDO2 PIN.
2 changes: 1 addition & 1 deletion source/components/nitrophone/index.rst
Original file line number Diff line number Diff line change
Expand Up @@ -24,4 +24,4 @@ For more details, see the following pages:
Background Images <background-images>
Frequently Asked Questions <faq>
Headwind MDM (HMDM) <hmdm/index>

FIDO2 on Android / NitroPhone <../nitrokeys/features/fido2/nitrophone>