roadmap icon indicating copy to clipboard operation
roadmap copied to clipboard
verified publisher icon docker

[Docker Hub] Support Yubikey hardware tokens for Docker Hub Login

Open saintaardvark opened this issue 5 years ago • 17 comments

Tell us about your request Docker Hub login supports 2FA, but only with applications like Google Auth or Duo. I would love it if hardware tokens like Yubikeys were accepted too.

Which service(s) is this request for? Docker hub.

Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard? I use Yubikeys at work and at home for 2FA whenever possible (including for the Github account I am using to post this). I'd love it if Docker Hub would let me use a Yubikey as well.

Are you currently working around the issue? I'm working around this currently by using Duo on my phone.

Additional context Thanks very kindly for adding 2FA -- now let's get the next bit done. :grinning: :muscle: :key:

saintaardvark avatar Jun 10 '20 17:06 saintaardvark

@saintaardvark Thx for filing!

pkennedyr avatar Jun 10 '20 20:06 pkennedyr

👍

tokuchan avatar Jul 02 '20 15:07 tokuchan

I'd really like this as well. This is one of the few accounts I have that isn't 2fa protected by my yubikey.

disassembler avatar Dec 04 '20 14:12 disassembler

@saintaardvark Thank you for filing this issue here! I noticed today that Docker Hub is still using / defaulting to weak 'Authenticator App' style TOTP instead of properly supporting hardware tokens for U2F.

For anyone working on WebAuthn for Docker Hub, etc. FYI there is a nice WebAuthn Demo Tutorial / Test site online and available here: https://webauthn.me

Source code is hosted here right now: https://github.com/auth0/webauthn.me

cmosetick avatar Mar 02 '21 08:03 cmosetick

Yes, it would be nice to be able to use hardware tokens!

yooakim avatar May 26 '21 17:05 yooakim

I agree.

taciturnaxolotl avatar Jun 16 '22 12:06 taciturnaxolotl

+1 Where is this feature being tracked? Do we have any timeline?

billalley avatar Nov 29 '22 19:11 billalley

+1 Would really like this feature too!

lriley2020 avatar Feb 04 '23 20:02 lriley2020

+1, this would be really nice to have!

PPrinsloo avatar Feb 15 '23 13:02 PPrinsloo

+1 add this pls.

onyx-and-iris avatar Feb 28 '23 14:02 onyx-and-iris

+1

grifonas avatar Jun 15 '23 15:06 grifonas

Whoa, it's almost 2024, how is webauthn not supported yet?

kyrofa avatar Dec 13 '23 01:12 kyrofa

Whoa, it's almost 2024, how is webauthn not supported yet?

It is 2024 and it still is not supported. Shame on them.

skast96 avatar Jan 09 '24 08:01 skast96

Whoa, it's almost 2024, how is webauthn not supported yet?

It is 2024 and it still is not supported. Shame on them.

Interestingly it's listed as an example but not supported? image

PierreSchwang avatar Jan 28 '24 01:01 PierreSchwang

https://arc.net/l/quote/bvvfehow It's using the YubiKey authenticator, which isn't webauthn and requires an additional mobile or desktop app.

taciturnaxolotl avatar Jan 28 '24 01:01 taciturnaxolotl

https://arc.net/l/quote/bvvfehow It's using the YubiKey authenticator, which isn't webauthn and requires an additional mobile or desktop app.

Well. Reading is a quite fundamental requirement when using the internet. Thank you

PierreSchwang avatar Jan 28 '24 01:01 PierreSchwang

How is this not a feature in 2025 for a developer oriented platform that some people pay to use. It is so basic

HEIlZMaker avatar Oct 04 '25 08:10 HEIlZMaker