Does anyone know how to add a new security device to a Google account? It seems the UI only supports passkeys now, but I don't want passkeys.

@buherator One hokey work around for YubiKeys specifically is to use their configuration program to temporarily drop support for FIDO2, leaving U2F enabled. Then register the key. Then re-enable FIDO2.

@tychotithonus How do I get to the point to register? Where do I click on the web interface?

(This is fucking ridiculous btw.)

@buherator @tychotithonus

Google Account > Security > Passkeys and Security keys > + create a passkey. Google et al. seem to use "passkey" and "security key" interchangably. Yes, this is confusing, but clicking + create a passkey lets you create as many security keys as your heart desires.

@dangoodin @tychotithonus Thanks, I tried that, but problem is I'm on Linux that is apparently not compatible with passkeys, so I can't even add a security key.

@buherator @dangoodin @tychotithonus Wait until you try Passkeys with GCP

@buherator @tychotithonus

Not even with Chrome?

@mdfranz @dangoodin @tychotithonus I have no intention to do so, I only want to setup simple-ass WebAuthn.

@dangoodin @tychotithonus Not even there :(

@buherator

Yep, that's what I interpreted the OP as meaning. If you take this path, unless it's already a U2F-only device, it's just created a passkey on the security key:

@dangoodin @mdfranz

@buherator

That dialog is shown for passkey creation locally, rather than the "Use another device" option (which does work on Linux, but still ends up creating a passkey on that other device (security key))

@dangoodin

@tychotithonus @dangoodin @mdfranz That's good to know, thank you!

This is actually a major push to kill my Google account: it's the key to a lot of places, but because of BS like this I can't secure it properly.

@buherator

YTMMV (Your Threat Model May Vary)!

One more note: when it's been done successfully, there's a warning attached to any key registered that way: "This key can only be used with a password" (which is, for you personally, a feature rather than a bug).

The first key shown was forced to U2F temporarily (no passkey). The second key was not (so it has a passkey on it). Note also the difference in icons.

@dangoodin @mdfranz