.. include:: /urls.rst

.. _pureos_fido_u2f:

Web authentication using FIDO U2F
=================================

PureBrowser may be configured for authentication against websites using FIDO U2F.

Enable
------

#. Install "U2F common files":
   ``sudo apt install libu2f-udev``
#. Open PureBrowser and navigate to ``about:config``
#. Search for ``webauth``
#. Set ``security.webauth.u2f`` to **True** (ignore the other webauth settings)

Test
----

#. Plug in your FIDO U2F key
#. Visit https://u2f.bin.coffee (ignore the outdated instructions there)
#. Click the "U2F Register" button
#. You should immediately receive a prompt from PureBrowser and your key will begin blinking.
   Squeeze the key to authenticate.
#. Repeat steps 3 and 4 with the "U2F Sign" button

Tested with:

* Nitrokey FIDO U2F
* PureBrowser 60.1.0
* libu2f-udev 1.1.6-1

References:

* https://support.nitrokey.com/t/1553
* https://u2f.bin.coffee