Hacker News Reader

Comment by irusensei | Hacker News Reader

I have a single yubikey so I'm not setting up this. I do use the yubikey but keep 2FA recovery codes from most services.

I do however have an unused Ledger X laying around. Does anyone knows if the Ledger X could act as a security key? Thanks in advance.

View on HN

> I do however have an unused Ledger X laying around. Does anyone knows if the Ledger X could act as a security key? Thanks in advance.

I don't have a X but I've got a S which I only use for U2F (well, webauthn now really). Chrome deprecated and now removed U2F support so moving forward it's webauthn but U2F devices are compatible with webauthn.

So yes it works. I use it to log on to several services and I use to log on using SSH.

Anyway here's a video showing how it works on a X:

https://support.ledger.com/hc/en-us/articles/115005198545-FI...

Now I don't know if it specifically work for this new AppleID "dual security keys" thing.

Unlike most WebAuthN services, Apple requires FIDO-certified keys. Are you sure the Ledger is?

Didn't work for me with the Ledger Nano X. Screen prompts for confirmation to register the key for a fraction of a second (on the Nano X), then goes back to the main screen, then back to confirmation (in a loop). I tried to confirm the "registration" screen during the brief time where it showed but wasn't successful.

Probably not, given that Apple requires a FIDO-certified key, and the Ledger almost certainly isn't.

Reply on news.ycombinator.com