Skip to content

Use the desk YubiKey

Saxon has two YubiKeys. This guide is for Key 1 — the desk key: a YubiKey 5C NFC (USB-C) that usually stays plugged into the PC at home.

Use this key when you are at Saxon's desk and a website asks for a security key or YubiKey.

What it looks like

  • Small USB stick, USB-C shape (oval port, not the old rectangular USB-A unless you use an adapter)
  • Gold circle on one side — you tap it when prompted
  • Often left in the front of the PC tower or laptop

The portable key (on a keychain) is a different guide: Portable YubiKey.

When you need this key

The desk key is registered on important accounts. Common prompts:

Service Why
Vaultwarden Extra protection when logging into the password vault
Cloudflare Admin access to domains and security settings
Bitwarden account settings Adding or changing 2FA
Windows Optional "sign in with security key" (Windows Hello)

Docs site (docs.saxobroko.com) usually does not need this key

Authentik login for SaxDocs is password-based. You still need the desk key for the vault and Cloudflare.

Before you start

  1. Plug in the desk YubiKey if it is not already connected.
  2. Know the YubiKey PIN — stored in Vaultwarden under a YubiKey or security note (Saxon may also have shared it offline).
  3. Have the browser or app open that is asking for authentication.

Step-by-step — Windows PC

1. Start the login

  1. Log in to the website as normal (email + password from Vaultwarden).
  2. When 2FA runs, a Windows Security or browser popup appears: "Insert your security key" or "Use your security key".

2. Use the key

  1. If the key is already plugged in, the PC may detect it automatically.
  2. If asked, enter the YubiKey PIN on the keyboard and press Enter.
  3. When the gold circle blinks, touch it lightly with your finger.
  4. Wait one or two seconds — the site should continue and log you in.

3. Confirm success

  1. You should land on the account dashboard or vault home screen.
  2. If the site asks again immediately, touch the gold circle once more — some sites require two taps.

Step-by-step — if the key was unplugged

  1. Plug the YubiKey into a USB-C port on the PC (directly — avoid broken hubs if login fails).
  2. Retry the login from the beginning (refresh the page if needed).
  3. PIN → touch gold circle as above.

Tips for daily use

Leave it plugged in at home

The desk key is meant to stay in the PC for convenience. Take only the portable key when you leave the house.

Do Don't
Plug into the main PC when working at the desk Mail the desk key overseas as the only key
Register both keys on every critical site Share the PIN in chat or email
Revoke a lost key immediately in account settings Guess the PIN repeatedly — too many wrong tries can lock the key

Troubleshooting

Problem What to try
"Security key not found" Reseat the key. Try another USB-C port. Restart the browser.
Wrong PIN Check Vaultwarden for the PIN note. Caps Lock does not affect numeric PINs.
PIN blocked Too many wrong attempts — you need the PUK/recovery procedure from Vaultwarden or YubiKey docs. See Login troubleshooting.
Desk key lost or broken Use the portable key if that site registered both keys. Then remove the lost key from Cloudflare / Bitwarden settings.
Works on PC but needed on phone Use the portable key with NFC — Portable YubiKey.