1

So I've recently been considering buying a physical security key (specifically this one) and was wondering if I could get it to work with tor seeing as the google support article on physical keys for 2FA say that you need an updated google chrome browser.

Any answers appreciated

Thanks, Diego

1 Answer 1

0

I looked into it a while back, Firefox support is still work in progress and U2F support is expected for Firefox 56/57. Until then, support remains hidden behind a preference. Alternatively, there is an addon that enables U2F support.

I wouldn't recommend installing the addon or enabling the preference. Since any page you visit, with JS enabled, can tell you have U2F enabled. Your fingerprint will be different from the majority Tor users.

I doubt Tor Browser will have support any time soon. Tor browser will only upgrade from Firefox ESR 52 to 59 next year. And even once that has been done, someone needs to look at the privacy implications. I suspect the Firefox implementation would need to be tweaked to make all Tor Browsers look the same, whether a U2F token is available or not.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .