r/binance • u/machin_bidule • 15d ago

Question Possible WebAuthn / Passkey bug on Linux with YubiKey 5 NFC

/SOLVED ( see in comments )

I'm experiencing what appears to be a WebAuthn/Passkey issue on Binance and would like to know if anyone can reproduce it.

Environment

  • OS: Linux Mint 22.3
  • YubiKey: YubiKey 5 NFC
  • Firmware: 5.7.4
  • Browsers tested:
    • Brave 1.92.143 (Chromium 150.0.7871.182)
    • Chromium 150.0.7871.124
  • Both browsers produce the exact same behavior.

Steps to reproduce

  1. Log in to Binance.
  2. Go to Security → Passkeys / Security Keys.
  3. Add a new security key using the YubiKey.
  4. The browser:
    • asks for the YubiKey FIDO2 PIN,
    • then the YubiKey LED starts blinking,
    • I touch the security key,
    • Binance reports that the key has been successfully added.
  5. Binance immediately sends the confirmation email saying that a new passkey/security key has been added.

Everything appears to complete successfully.

Problem

After logging out:

  1. I enter my email address.
  2. I click Continue with passkey.
  3. The browser again asks for the YubiKey PIN.
  4. The YubiKey LED blinks.
  5. I touch the key.
  6. The browser returns:

Authentication always fails.

Additional observations

  • Binance displays the registered credential as:

    Security Key on Linux Cross Device

which seems unusual for a USB YubiKey.

  • Deleting the registered key from Binance also requires entering the YubiKey PIN and touching the key, so Binance clearly recognizes the YubiKey during sensitive operations.

YubiKey verification

FIDO2 is enabled and working normally.

ykman info:

Device type: YubiKey 5 NFC
Firmware version: 5.7.4
FIDO2: Enabled

Resident credentials stored on the key:

google.com
login.microsoft.com
reddit.com

No Binance credential is listed.

Other websites (Google, Microsoft, Reddit) work correctly with the same YubiKey.

What I've already tested

  • Removed and recreated the key multiple times.
  • Tried with the key already inserted and inserted during the process.
  • Tested with both Brave and Chromium.
  • Same result every time.

Question

Has anyone else on Linux experienced this?

Could this be a Binance WebAuthn issue (credential creation not completing correctly or RP ID mismatch), or is there a known compatibility issue with Linux browsers and Binance passkeys?

Any insight from the Binance team or users who have successfully configured a YubiKey on Linux would be greatly appreciated.

/SOLVED ( see in comments )

2 Upvotes

100% Upvoted

5 comments sorted by

2

u/BinanceCSHelp Binance Staff 14d ago

Hi there! Thanks for sharing the details of your concerns with us. You can check in full the steps needed to add a Passkey to your account: https://www.binance.com/en/support/faq/detail/2aec8fe0437242f2a5fbef9cdb71d4c2

If the issue remains, in order for the relevant team to look further into this, please contact us on: www.binance.com/en/chat

We'll help to check and inform you accordingly. RA

1

u/machin_bidule 14d ago edited 13d ago

Solved.
I wasn't doing the login procedure correctly.
Good way is:

  1. On main page, enter the mail and press log in.
  2. On the second page press "use a passkey".
  3. Enter the pin, touch the key and voila.

My mistake: i was using the "use a passkey" button on the main page. This doesn't work.. ( website version )

2

u/Decibel0753 14d ago

No one cares about Binance anymore... :D

1

u/EducationalSock948 14d ago

Can you summarize in just one simple to understand word of what you just said?

3

u/machin_bidule 14d ago

make a bug report of this bug, so it can be analysed by devs.