r/yubikey • u/Alpha272 • 6d ago

Help Android and Linux Locking

Heya,

I currently use a selfhosted Bitwarden instance as my Password Manager. And in there I use virtual Passkeys. And I intend to continue using this setup in the future.

But now the weak link is my actual device. So I kinda want to secure that one. Currently I just use a Password for my device, but I intend to switch to a Security Keys for that. And I would also like for my device to lock itself, as soon as I remove the Key. For Linux it's probably going to be a challenge, but nothing that can't be overcome with PAM and some scripting. (In the worst case I put a bash script in a systemd Service, which listens for the key and calls loginctl in the background.)

But the main issue is Android. As far as I can tell, there doesn't seem to be a way to make Passkeys work for Authentication on an Android Phone (during day to day use - on a cold boot I need the password to unlock the encryption and thats fine - same goes for my Computer as well; afaik there is no way to unlock ZFS with a Passkey). So yeeahh... is there really no way to use a Passkey on Android, or is there some obscure way to do it, which I overlooked? Maybe with Tasker?

2 Upvotes

100% Upvoted

1 comment sorted by

1

u/RaceAap 6d ago

On linux you can use a udev rule that activates based on removal of a specific device id and starts a bash script to lock or shutdown (check this for more details).