Can hardware security keys be opened up to other browsers?

smeeps

I use a Yubikey as a multi factor authenticator wherever possible but its not a great experience on GrapheneOS. I wish you didnt need Play Services installed as its the only thing I have it installed for, but that's by the by.

As far as I can tell, only Vanadium and Firefox and maybe Brave support authentication keys? If I try in privacy focused browsers such as Fennec, or Mull, the popup never opens and the authentication just fails. Same for if an app opens a webview to authenticate, the hardware key doesn't work in this webview.

Is there a list anywhere of exactly which browsers it works with? And is there any reason it can't be enabled for all apps, as it is on stock Android?

Cheers

fid02

smeeps If I try in privacy focused browsers such as Fennec, or Mull, the popup never opens and the authentication just fails.

That might be an issue with those browsers. Have you checked their respective issue trackers to see if others are reporting the same issue?

smeeps Same for if an app opens a webview to authenticate, the hardware key doesn't work in this webview.

I think you might be thinking of custom tabs, but in any case, try first to enable JIT in Vanadium (assuming Vanadium is your default browser) for those websites. For instance, for Tuta you can go to https://app.tuta.com and tap on the "site settings" icon in the left corner of the address bar, allow JavaScript JIT and refresh the page. Then go back to the Tuta app and try to sign in again.

If that doesn't work, I might be able to test those apps if you name them.