This site contains affiliate links to products. We may receive a commission for purchases made through these links.
Yubikey is simple and does not require any software download or install to function properly. Read on how to reset your yubikey when you have forgotten your password.
Hi, my name is Jane and I enjoy my job as scientist in a pharmaceutical company. My boss entrusts me with all the company’s information because I work at the main quality control lab. Yubikey has helped me keep information intact and away from individuals who want to use it to incriminate the company. The information is kept safe in my MAC laptop that I carry with me from home to work every day. Recently, I failed to access the information on my laptop but I do not understand why. Since all my websites and accounts are locked away in my laptop, I sort to find a simple yet safe solution to reset the key
Read below on how you can reset your yubikey
Some yubikey series have different applets which mean the processes are different and you will have to reset only the part you are having an issue with.
Resetting the OTP Applet
Technically, you cannot reset the OTP on your yubikey using factory default settings. You can try to emulate factory reset by deleting all the credentials from both slots. Programme OTP and yubico credential to a common slot and upload them to a cloud. Before you follow these steps, keep in mind that the possibility of permanently deleting all your credentials stored in the two slots in your yubikey is close to 100%. You can delete the credentials by downloading and installing yubikey personalisation tool. Insert the yubikey to your pc after opening the personalisation tool. Ensure you verify that your yubikey has been identifies. Click the tool button and you’ll come across a delete configuration button. From there it is as simple as selecting the configuration slot one and two and clicking on delete.
Resetting the FIDO2 or security key on your app
The main reason for resetting your yubikey in this situation is when you have locked you FIDO pin and there are too many incorrect attempts to retrieve the password. You can correct by simply resetting the security of yubikey. Before you go ahead with this, keep in mind that all credentials, including the reset root for two factor authentication will be deleted. To reset the FIDO, first download the yubikey manager and insert the key into a port on your pc. When you open the yubikey manage, you will see the applications section, click on it and then the FIDO2 and reset. When a confirmation page appears, click reset to confirm. Remove and re-install the key in case you face any prompts.
Resetting the smart card applet on your yubikey
Before we begin, keep in mind that resetting the smart card on your yubikey will clear all the data on your smart card and reset everything to factory default. This reset will not impact any other applet but will clear all your certificates. There are two ways you can go about resetting the smartcard. For process one, once you have installed the yubikey manager on your pc, click on the application, choose PIV then press the PIV reset and you are done. Lucky for you there is another way when this does not work. Using the same yubikey manager, you can open command prompt is the administrator and run ykman PIV reset. The PC should give you a prompt where you will press y and the enter button to confirm reset.
How to reset the oath applet on your yubikey
Just like all the resets, you are bound to lose some information. This reset will delete all the oath credentials including the window registrations. To make sure you are not going to lose all your accounts by locking yourself out; ensure you disable all the 2FA requirements for the accounts. Insert the yubikey into a port on your PC, making sure the yubico authenticator is installed. Select the reset option from the file menu and you will good to go.
Conclusion
Since I had tried all the attempts possible to unlock the password on my yubikey, I decided to reset the FIDO or security key. Even though I lost all information, I had prepared for this in advanced and saved it in a separate websites. I like the fact that the reset was simple and I can develop another password easily.
FAQs
How To Reset Your YubiKey Without Your PIN
- Type Sign-In and this will bring up Sign in the search box. ...
- Touch your security key when it prompts. ...
- Touch the security key the SECOND TIME! ...
- Once this is done you will need to go back to myprofile.microsoft.com to delete the Security Key and re-add due to the PIN change!
IF YOU DO NOT KNOW YOUR CURRENT PIN:
Please contact the Service Desk to reset your PIN. There is a YubiKey Manager app. However, after evaluation, we do not recommend using it as it runs the risk of wiping data from your device.
How to fully reset a YubiKey? ›
Navigate to Accounts > Sign-in options > Security Key, and click Manage. Follow the prompts in the window that appears, and then click the Reset button. Follow the prompts on-screen to complete resetting your YubiKey.
What do I do if I forgot my YubiKey? ›
If you lose your Yubikey, you can still use your phone authenticator app, but you cannot create a backup Yubikey. However, Yubikey also provides methods to recover your account, so you can get a replacement. An advantage to Yubikey is that it comes on a USB that cannot be identified.
What is the default PIN code for YubiKey? ›
General information. The default PIN code is 123456. The default PUK code is 12345678. The default 3DES management key (9B) is 010203040506070801020304050607080102030405060708.
How to reset security key password? ›
If your security key is locked due to multiple incorrect PIN entries and must be reset:
- On your computer, open Chrome .
- At the top right, click More .
- Click Settings Privacy and security Security Manage security keys Reset your security key.
- Follow the instructions on screen.
Get your recovery code from the Two-step login screen immediately after enabling any method. Log in to the Bitwarden web app. Locate the YubiKey OTP Security Key option and select the Manage button. You will be prompted to enter your master password to continue.
How do I find my YubiKey PIN? ›
The YubiKey is manufactured with the standard default PIN, PUK, and managment key values:
- PIN: "123456"
- PUK: "12345678"
- Management Key: (Firmware Version 5.6 and below: Triple-DES / 5.7 and above: AES-192), 0x010203040506070801020304050607080102030405060708. 0102030405060708 three times.
You set the PIN policy to never and the touch policy to always. Now when you call the Authenticate: sign command, you won't need to combine it with PIN verification to make it work, but the YubiKey won't complete the signing process until the YubiKey has been touched.
What is a hard key reset? ›
A factory reset, also known as hard reset or master reset, is a software restore of an electronic device to its original system state by erasing all data, settings, and applications that were previously stored on the device.
You can overwrite an already-programmed YubiKey in any of the normal AuthLite programming interfaces. You will see an additional dialog warning you that the old information on the key will be destroyed (Except in the bulk Key Programmer, which overwrites key data without warning).
How do I remove my YubiKey password? ›
Delete the YubiKey OTP factor
- In the Admin Console, go to SecurityMultifactor.
- Select YubiKey.
- Click Active, then Deactivate.
- The Delete YubiKey factor prompt appears.
- Click Delete.
Unplug the YubiKey once and then plug it back in via the USB port. Touch the YubiKey on the sensor (golden area) twice within 10 seconds to confirm the reset. The YubiKey has been successfully reset. Afterwards, if necessary, you can set a new PIN again using the Security Key PIN function.
Where do I find my YubiKey code? ›
Each YubiKey has a unique serial number identifying the specific device. The serial number is printed on the YubiKey's body (both as a number as well as a 2D barcode for some models), as well as being accessible by a number of different functions by a connected computer.
Does YubiKey remember passwords? ›
The YubiKey works with Password Safe to protect your passwords using two-factor authentication (2FA). Both a master password and a YubiKey are needed to enable access to your Password Safe file, which contains the usernames, websites, passwords and other information for all of your online accounts.
How do I reset my secure key PIN? ›
Go to the online banking log on page, locate the security code field and then select the 'forgot PIN' link. From there, enter the answers to your security questions, enter the unlock code from your device and follow the onscreen instructions to create a new PIN.
What happens if YubiKey has too many incorrect PINs? ›
If you enter an incorrect PIN three times, the YubiKey locks and becomes temporarily unusable. PUK – A unique code that unlocks a locked YubiKey.
How do I change the admin PIN on my YubiKey? ›
Change the PINs on your Yubikey.
The default PIN that ships with your Yubikey is 12345678 . $ gpg2 --card-edit ... gpg/card> admin Admin commands are allowed gpg/card> passwd ... 1 - change PIN 2 - unblock PIN 3 - change Admin PIN 4 - set the Reset Code Q - quit Your selection?
