[Security] Support security keys (such as Yubikey) for administering settings/transations

Add Security key (Such as Yubikey) support for things like:

  • Viewing your private key
  • Changing key settings like your password, or address whitelisting (need to add this feature too!)
  • Sending transactions

Using a physical security key will greatly improve security, especially for those who don’t have a hardware wallet yet.
It helps secure your private key settings and allows you to lock address whitelisting settings too.
It reduces risk of being held at gunpoint and forced to transfer your crypto against your will.

Details:
i.e. You are unable to make the transfer without your Yubikey which is at home,
Showing a clear screen “Unable to access without Security Key” might help deter assailants)


Like or reply to this thread if you’d like to see this added!

agreed or integration with Google authenticator for those features. I had a metamask wallet compromised (by my own fault) but some 2 factor authentication would have saved me from myself.

6 Likes

I love this idea. Love to see it on metamask

4 Likes

Can we create a bounty to get this feature added?

4 Likes

892ebc216e707e8eb8444af8ad75394e06c413862390f976eaacc242f7f2ce6a

3 Likes

Two factor Authentication is not possible with a decentralized app like MetaMask. We do not hold your keys. You do. So there is nothing to authenticate.

Related to Security Key support: What you describe is a hardware wallet. MetaMask integrates with Ledger and Trezor.

See Why doesn't 2FA help MetaMask

3 Likes

A security key (like Yubikey)
Is NOT the same as a hardware wallet.

They can act in a similar way though.

You can see platforms like Binance, Coinbase, Kraken have support for Security keys to add a strong layer of security.

3 Likes

This is amount locking down access to sensitive settings in the app, so yes there are things to authenticate.

1 Like

A ledger hardware wallet can be hacked too via trojan horse. The Trojan horse changes the transaction address between the legder and metamask. Have the extra yubikey step would make this nearly impossible.

Also the ability to using different Yubi keys for sub accounts in the same wallet would avoid the whole wallet being hacked

3 Likes

If Safemoon Wallet can do this, why can’t MetaMask?

4 Likes

i beg u metamask kindly add yubikey feature in mobile and desktop.

3 Likes

Agreed. This feature is needed