Is GNU pass and Yubikey (via NFC) supported on iPhone?

Question

Hello,I am considering moving from Android to iPhone in the near future. I think the only thing I can't really evaluate easily is whether or not there is support for GNU pass where the GPG key is stored on a Yubikey.My Android password manager workflow is:Need password -> Android pass app requests Yubikey Pin -> App requests NFC tap -> password decrypted.Can I replicate this UX on iPhone today?

upon_drumhead · Accepted Answer

What is GNU pass? It looks like people use it to refer to https://www.passwordstore.org/ which isn&rsquo;t a GNU project?

shadowfiend · Answer

https://github.com/mssun/passforios might be of interest.

mritun · Answer

Unsure about Gnu pass, but several (offline) password managers on iOS support Yubikey. One such example is Keepassium (Open source, GPL) https://keepassium.com/blog/2020/01/keepassium-1.10-yubikey/

jachee · Answer

Short answer: no.Longer answer: iCloud Keychain is end-to-end encrypted credential storage, and its workflow is:Need password -> Secure system hook to Keychain -> Keychain requests unlock via (face/finger/passphrase as appropriate) -> Password decrypted and auto filled.There are also third-party options, which can nominally use NFC keys[0] as auth factors, but I&rsquo;m not currently aware of any that actually do.Personally, I use 1Password, because I&rsquo;ve still got a Windows box in my world, and need something cross-platform, and since I&rsquo;m paying for it, I know it&rsquo;s the product and not me.[0] https://developer.apple.com/documentation/authenticationserv...

mcintyre1994 · Answer

AFAIK you can&rsquo;t use anything except FaceID (or other system level security options) to secure the default password manager on iOS. But Yubikey does work with iOS, either the NFC one or the one with the lightning connector. Third party password managers are well integrated, so if one of them supported Yubikey I think you could achieve the same UX, but I&rsquo;m not sure if any do. I&rsquo;m not familiar with GNU pass sorry!

madjam002 · Answer

Yes you can, you can use the https://github.com/mssun/passforios app which as of over a year ago supports Yubikeys.The UX of having to grab your Yubikey every time is a bit clunky though (although that is limitation of the security key medium itself rather than the app).

aborsy · Answer

It&rsquo;s a superb tool with Yubikey, but has a bad name. Can&rsquo;t be easily googled.

Is GNU pass and Yubikey (via NFC) supported on iPhone?

What is GNU pass? It looks like people use it to refer to https://www.passwordstore.org/ which isn’t a GNU project?

https://github.com/mssun/passforios might be of interest.

Unsure about Gnu pass, but several (offline) password managers on iOS support Yubikey. One such example is Keepassium (Open source, GPL) https://keepassium.com/blog/2020/01/keepassium-1.10-yubikey/

Yes you can, you can use the https://github.com/mssun/passforios app which as of over a year ago supports Yubikeys.
The UX of having to grab your Yubikey every time is a bit clunky though (although that is limitation of the security key medium itself rather than the app).

It’s a superb tool with Yubikey, but has a bad name. Can’t be easily googled.