Skip to main content

Set up two-step login with YubiKey

SecretSafe supports two-step login via YubiKey. Any YubiKey that supports OTP capabilities can be used. This includes all YubiKey 4 and 5 series devices as well as YubiKey NEO and YubiKey NFC.

note

Due to platform limitations, YubiKeys cannot be used on all SecretSafe applications. You should enable another two-step login provider so that you can access your account when YubiKeys cannot be used.

Supported platforms:

  • Web safe on a device with a USB port that can accept your YubiKey.
  • Browser extensions on a device with a USB port that can accept your YubiKey.
  • Desktop app on a device with a USB port that can accept your YubiKey.
  • CLI on a device with a USB port that can accept your YubiKey.
  • Android on a device with NFC capabilities or a USB port that can accept your YubiKey. Read more here.
  • iOS on a device with NFC capabilities or via lightning port with YubiKey 5Ci.

Enable Two-step Login with YubiKey​

danger

Two-step login can permanently lock you out of your account. It is very important that you write down and keep your two-step login recovery code in a safe place in the event that you lose access to your YubiKey.

  1. Log in to the web safe at https://secretsafe.rayt.io

  2. Click Settings in the top navigation bar, then click Two-step Login from the side menu.

  3. Select the Manage button for the YubiKey OTP Security Key option and then type in your master password to continue.

  4. Follow the instructions shown:

    • Plug the YubiKey (NEO, 4, or 5 series) into your computer's USB port.
    • Select in the first empty Key input field.
    • Touch the YubiKey's button.

    Repeat this process for each YubiKey you wish to add to your account. You can add up to five YubiKeys to your account.

  5. If you are using a YubiKey that has NFC capabilities (YubiKey NEO or YubiKey 5 NFC), check the One of my keys supports NFC checkbox. This option enables the use of your YubiKey on Android and iOS devices that support NFC.

  6. Click the Enable button. A green alert will appear at the top stating that two-step login has been enabled.

  7. Click the Close button and confirm that the YubiKey OTP Security Key option now shows as Enabled.

Test​

  1. IMPORTANT: Ensure that you have copied down your two-step login recovery code in case something goes wrong.

  2. Log out of the SecretSafe website.

  3. Log back into the SecretSafe website. You should now be prompted with a YubiKey two-step login option. Insert your YubiKey and touch it's button to complete logging in.

  4. Log out of and back in to any other SecretSafe applications that you are using to confirm that two-step login via YubiKey is properly working. You will eventually be logged out automatically. If the application (or device) your are using does not support YubiKey you will be presented with other two-step login options that you have configured (if any).

    Web

    Desktop

    Browser extension

    Android

    iOS

Android​

If you are having trouble getting the YubiKey NEO or YubiKey 5 NFC to work on your Android device, confirm the following:

  1. You have checked the One of my keys supports NFC checkbox from step 5 above.
  2. Your Android device supports NFC and is known to work properly with YubiKey NEO or YubiKey 5 NFC.
  3. You have NFC enabled on your Android device. Enable NFC by going to Android Settings → More and enable the NFC option.

If the YubiKey NEO or YubiKey 5 NFC can be used on your Android device you will be prompted with a YubiKey option while logging in to SecretSafe. Simply place the YubiKey on the back of your Android device near the NFC receiver. If you do not know where your NFC receiver is located, you may need to move it around some, trying different areas. Once SecretSafe detects the YubiKey it will automatically validate and log you in.