Skip to content

[BUG] Cannot unlock KeePass DB on iOS with YubiKey 5C NFC (works on macOS via USB-C) #836

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
2 tasks done
Jmacek opened this issue Apr 24, 2025 · 0 comments
Open
2 tasks done

Comments

@Jmacek
Copy link

Jmacek commented Apr 24, 2025

Preliminaries
I have ensured that:

  • I am running the latest version of Strongbox on the App Store
  • I have performed a full restart of my device

Versions

On macOS:

  • OS: macOS 15.3.2
  • Strongbox Version: 1.60.36

On iOS:

  • Device: iPhone 15 Pro
  • OS: iOS 18.3.2
  • Strongbox Version: 1.60.36 (Pro)

Describe the Bug

I cannot unlock a KeePass database on iOS using my YubiKey 5C NFC, despite using the correct master password and having the YubiKey configured with the challenge-response secret in Slot 1.

On iOS, after entering the password and scanning the YubiKey via NFC, I receive the error:

"The credentials were incorrect for this database."

The exact same password, database file, and YubiKey do work on macOS (via USB-C), so the issue is isolated to NFC use on iOS. This has worked previously with the same yubikey and same database on this device.


To Reproduce

  1. Open Strongbox on iOS
  2. Tap the database that uses YubiKey challenge-response
  3. Enter the master password
  4. Scan the YubiKey 5C via NFC
  5. Receive the error: "The credentials were incorrect for this database."

Expected Behavior

The database should unlock successfully after scanning the YubiKey via NFC, just as it does on macOS with USB-C.


Additional Context

I created a virtual backup YubiKey using the same challenge-response secret, and it does unlock the database successfully on iOS. This confirms the master password and database config are correct, and points to an issue with Strongbox handling the physical YubiKey over NFC.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant