FIDO2 Security Questions | Trezor Users Seek Clarity Amid Confusion
Edited By
David Lee
A growing number of Trezor users are voicing questions about FIDO2 support on forums, as some express concerns over the device's backup capabilities and credential security. With increasing interest in hardware wallets, the community seeks to clarify the functionality across different models.
Understanding the Role of FIDO2 in Trezor Devices
Many Trezor users are considering the purchase of devices for their FIDO2 capabilities, but confusion persists regarding operational specifics. Key areas of inquiry revolve around backup procedures, credential management, and the support of PIN authentication.
Main Themes Arising from User Inquiries
Credential Backup and Management: Users want clarity on how to effectively backup credentials using commands like
trezorctl fido credentials list. The community is also examining whether adding credentials can adjust counters for resident credentials.PIN Authentication Queries: A prominent question remains whether a PIN can be enforced, even if user verification isn't requested by the identity provider (IdP). Reportedly, users prefer having more control, with some suggesting a toggle option similar to the Yubikey config.
Device Model Comparisons: Users are discussing whether all models supporting FIDO2, including T and Safe 5, follow the same authentication standards and the implications for credential security.
User Sentiments
Opinions within the community range from hopeful to frustrated. One commenter noted, "Trezor is likely the only good choice for backups, but manual handling is a chore." Another pointed out, "Entering the PIN often feels like a hassle, especially on the touch models."
"My primary requirement is to backup and restore credentials, but I want a reliable method!" - A concerned user
Key Insights
🔒 Backup can be executed using
trezorctl fido credentials list, but not per-credential counters are currently supported.🆔 All FIDO2 models require a PIN for authentication but may not offer enforced user verification beyond the IdP request.
🔍 Users echo concerns about possible confusion between resident and non-resident credentials derived from the device seed.
With these discussions heating up, it's clear that as hardware wallets gain traction, the need for clear guidance around FIDO2 and credential management remains essential. Curiously, will manufacturers respond to these pressing community queries?
Need for solutions is urgent as users seek a path toward safer, more manageable security practices.
Further Reading
For more information on Trezor and FIDO2 functionalities, visit Trezor.
Stay tuned for more updates as the community continues to engage and share insights.