YubiKey & 2FA — FAQ

Two YubiKey 5 devices — desk (USB-C) and portable (keychain NFC). See Yubikey doc.

YUB-001 — What are the two YubiKeys?

1. Desk YubiKey 5C NFC at PC. Portable YubiKey 5 NFC on keychain.

YUB-002 — Which key for daily PC use?

1. Desk key plugged into Windows PC at 192.168.2.200.

YUB-003 — Which key for phone?

1. Portable key — tap NFC to back of phone.

YUB-004 — Both keys registered everywhere?

1. Should be — losing one key shouldn't lock you out.

YUB-005 — Lost a YubiKey?

1. Use the other key immediately.
2. Revoke lost key in Cloudflare, Bitwarden, every service.
3. Register replacement.

YUB-006 — YubiKey PIN — where?

1. In Vaultwarden — not SaxDocs.

YUB-007 — Wrong PIN too many times?

1. Key may block — recovery details in vault/handover. Stop guessing.

YUB-008 — Touch the gold circle?

1. Yes — after PIN, touch metal circle when prompted.

YUB-009 — Security key not found?

1. Replug desk key directly — not through hub if possible.
2. Try other USB port.

YUB-010 — Windows Hello asks for key?

1. Insert desk key, enter PIN, touch circle.

YUB-011 — Cloudflare login needs key?

1. Yes — dash.cloudflare.com — both keys registered.

YUB-012 — Bitwarden 2FA with key?

1. At vault login — register both keys in account settings.

YUB-013 — Phone NFC not working?

1. Enable NFC in phone settings.
2. Hold key flat against upper back of phone.

YUB-014 — iOS WebAuthn popup?

1. Enter PIN, tap portable key to phone back.

YUB-015 — Android WebAuthn?

1. Same — NFC tap portable key when prompted.

YUB-016 — Need key for Authentik?

1. Usually no — password only.

YUB-017 — Need key for MyState/Vanguard?

1. Depends on how Saxon set 2FA — check vault notes per bank.

YUB-018 — Travel — which key?

1. Take portable keychain key — not desk-only setup.

YUB-019 — Desk key unplugged by accident?

1. Plug back in — retry login or swap to portable key.

YUB-020 — Browser says cancel or timeout?

1. Retry — touch circle within timeout window.

YUB-021 — Multiple keys plugged in?

1. Unplug spare — browser may pick wrong one.

YUB-022 — Register new key after replacement?

1. Log into each service (Cloudflare, Bitwarden…) → security → add key.

YUB-023 — Backup codes vs YubiKey?

1. Backup codes one-time — store in vault. Keys are daily use.

YUB-024 — Key physically damaged?

1. Use other key, revoke broken one, order YubiKey 5 NFC replacement.

YUB-025 — Child needs to use key?

1. Only with supervision — PIN in vault, Ryan handles tech per will.

YUB-026 — Key not working after Windows update?

1. Update YubiKey firmware/drivers via Yubico site if Ryan advises.

YUB-027 — Firefox vs Chrome key behavior?

1. Both support WebAuthn — try other browser if one fails.

YUB-028 — Find keys after Saxon died?

1. Desk: PC USB port. Portable: keychain, wallet, bedside — First 24 hours.

YUB-029 — Only one key found?

1. Use it — register replacement ASAP on all services.

YUB-030 — No keys found?

1. Vault may be unreachable without keys if 2FA required — urgent Ryan/handover recovery.

YUB-031 — Key required but I'm not Saxon?

1. Ryan inherits tech — keys should work if registered for account you use.

YUB-032 — Can I disable YubiKey?

1. Not recommended — weakens security. Ryan only for emergency.

YUB-033 — Desk key guide?

1. Use desk YubiKey.

YUB-034 — Portable key guide?

1. Use portable YubiKey.

YUB-035 — What is 2FA?

1. What is 2FA — second proof besides password.