Passkeys On A Yubikey ? Here's How To Set Them Up 

Thanks for the video, no complaints on that. If anyone is thinking of getting these, forget it. Hard to set up and even harder to get them to work on the things you want to protect. If this was a good product it would be plug and play, this key is simply a good idea wrapped in a terrible product. I've seen 10 videos now and can't get this to work with any websites.

Thanks, Tim. I have been trying to install my YubiKeys for 2 weeks unsuccessfully. Your instructions have been the easiest to understand. Thanks!

Very clear walkthrough and demonstration of the process. Thanks for making the video. However, having seen the process from start to finish like that, I'm struggling with one thing: yes, it might be a very secure process from a remote attack point of view but it's surely weaker in terms of a local/physical attack. Using a Yubikey (or similar) security key as a second factor, an attacker would need the following to gain access to your account: 1. Your username (let's assume this is well known or at least very easily guessable; not a secret at all). 2. Your password (obviously the strength of this depends on the actual password in use, but hopefully it's at least reasonably good). 3. Your second factor. When using a physical key like this, my understanding is that it's as secure as a passkey insofar as nobody is likely to be able to compromise it remotely. So they'd need the actual key itself as well. However, using a passkey, they'd only need 1 and 3. They'd also need the PIN for the key but having watched your video, I assume that's just a basic numeric key (you used six digits). Not nearly as strong as whatever your actual Google account password would have been. So surely now your account is only as secure as your Yubikey is. If you drop it, lose it, leave it unattended on your desk in the office accidentally, get mugged, whatever it might be... you have given up a very large proportion of the protection on your account and you'd need to get into your account and revoke the passkey ASAP. Whereas in the same scenario using the key as a second factor, you'd still be relatively well protected by your actual account password giving you a little more breathing space to get logged in and revoking the second factor for the now-lost-or-stolen Yubikey. Everyone keeps talking about how passkeys are the best of the best security-wise, so I wonder if I'm somehow missing something?

Excellent video thanks

Great thanks

i've used a yubico Security Key NFC and was able to use FIDO2 Passkeys. I think it's not tied only to the 5 series.

Is the pin you entered when setting up the passkey is the pin/pass phrase for the yubikey or a pin per passkey. I assume the former.

Great Video! Thx.

i bought a series 5 and only seldom use. how the hell google make it into a passkey? and limit to 25/key? before that i think i could link unlimited accounts. why go backward?

Token2 stores 300 passkeys

no sh1t, not working for me. cant finish the process.