---
layout: post
title: "The End of Yubikeys as 2-Factor-Authentication? Google Breaks 2FA with Yubikeys in Favor of Passkeys"
tags: [security]
description: "Google now forces Passkeys for hardware tokens. Use this workaround link to register Yubikeys and FIDO2 keys as standard 2FA devices on your Google account."
---

---

It seems that you can no longer _register_ a FIDO2 compliant hardware token, like a Yubikey, as 2-factor-authentication method on Google. It can now _only_ be registered as a Passkey. If you have previously registered it as a 2fa hardware key, it still works: it's just that the registration interface is gone.

I suppose it's the natural progression of things, but it is a bit annoying if you're not ready for Passkeys yet.

---

Luckily, my co-worker worked out you _can_ actually still register it if you use the direct link [https://myaccount.google.com/signinoptions/two-step-verification?flow=sk&opendialog=addsk](https://myaccount.google.com/signinoptions/two-step-verification?flow=sk&opendialog=addsk).

Those that have multiple accounts can add the standard `/u/1/`, `/u/2/`, etc. to the end of `google.com/`. Thanks Jakub!