Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

FIDO U2F tokens Web Browsers compatibilty

I'm trying to integrate U2F Authentication in GWT project and I need to know if is this solution compatible with all new web browsers (Firefox, Internet Explorer, Safari...)? Normally in Google Chrome I've to install a plugin that's called "FIDO U2F (Universal 2nd Factor) extension". Is the same for others browsers?

Is there any way to work without a plugin for new web browser?

like image 697
Abdessamad Doughri Avatar asked Mar 18 '15 10:03

Abdessamad Doughri


People also ask

What websites support U2F?

U2F security keys can be used as an additional method of two-step verification on online services that support the U2F protocol, including Google, Azure, Dropbox, GitHub, GitLab, Bitbucket, Nextcloud, Facebook, and others.

Does Firefox support FIDO U2F?

The latest version of Firefox supports FIDO2 and U2F keys : FIDO2 has been supported since version 66.0. 32. U2F has been supported since version 57, but only enabled by default from version 68 onwards.

Does Safari support FIDO U2F?

The Safari browser is also now supported for authentication and registration of security keys, in addition to other major browsers such as Mozilla, Opera, Firefox, and Chrome. Users that already have FIDO-compliant authenticators, such as FIDO U2F security keys, will be able to continue to use these authenticators.


1 Answers

  • Do other browsers support U2F? currently not.
  • Is there any way to work without a plugin for a new web browser? No, that's the whole point of U2F: a phishing attack is made impossible thanks to direct communication with the browser.

Extra information

You had to install a plugin in Chrome in the past, currently (I think starting from version 40), this is not required anymore: U2F capability is built in from that version on in Chrome. As to which other browsers support U2F: currently none. Firefox supports U2F via the U2F Support Add-on, and is working on supporting U2F natively.

Microsoft reportedly will include FIDO support in Windows 10. It might be possible that browsers will rely on the OS-U2F-check then, and do not (need to) include FIDO support directly anymore. However, this is speculation only for the moment.

An easy compatibility check I'd like to carry out is to use the Yubikey's demo site.. It will be reported immediately when your browser does not support U2F (try opening the demosite in Firefox and see what happens).

like image 183
Michael Avatar answered Jan 06 '23 07:01

Michael