Last message received:

OnlyKey DUO Setup OnlyKey Setup

Begin the Guided Setup wizard by clicking [Next] at bottom. Or, if you would like to upgrade firmware on your device, select [Load Firmware]. Advanced users may enable advanced setup options by checking this box:

Your OnlyKey DUO is ready to use! Use the options below to change PINs or backup passhrase.

Before selecting an option below, you must first put your OnlyKey DUO into config mode.

To do this hold down button #6 on your OnlyKey for 5+ seconds and release. hold down button #1 on your OnlyKey DUO for 10+ seconds and release. The light will turn off. If a PIN was previously set, re-enter the PIN to enter config mode. You will notice the OnlyKey flashes red in config mode.

Re-enter PIN on OnlyKey Keypad

Re-enter the 7 - 10 digit PIN on your OnlyKey six-button keypad. When you are finished, click [Next] below.

Re-enter PIN for Second Profile on OnlyKey Keypad

Re-enter the 7 - 10 digit PIN on your OnlyKey six-button keypad. When you are finished, click [Next] below.

Re-enter Self-Destruct PIN on OnlyKey Keypad

Re-enter the 7 - 10 digit PIN on your OnlyKey six-button keypad. When you are finished, click [Next] below.

Enter a Backup Passphrase

Your passphrase will be used for secure backup and restore of your OnlyKey so make sure to choose a good one, write it down, and store it in a secure location.

Example of a good passphrase: 'this passphrase is not complex but it is long and it is not a common phrase'

Example of a bad passphrase: 'the only thing we have to fear is fear itself'






Learn more about secure backup here.

Set a Backup Key

Your OpenPGP key will be used for secure backup and restore of your OnlyKey, make sure to store it in a secure location.

Need a key? Follow our guide here for generating an OpenPGP key.











Restore from Backup

To restore a backup file to your OnlyKey, ensure you have loaded the same backup passphrase or backup key you used to create the backup.

Click [Choose File], select your backup file, then click [Next].

Restore can take up to 1 minute to complete, your OnlyKey will automatically reboot when restoring is complete.

If you do not have a backup file to restore then setup is complete, you may remove and reinsert your OnlyKey now.





Load Firmware

To load new firmware file to your OnlyKey, click [Choose File], select your firmware file, then click [Load Firmware to OnlyKey].

The OnlyKey will restart automatically when firmware load is complete.


Guided Setup

Configure Slots Configure Slots

Slots are where you store login information such as a login URL, username, password, and two-factor. Click here for more information and to see common use examples.

empty
empty 		empty
empty
empty
empty 		empty
empty
empty
empty 		empty
empty
Profile:
empty
empty 		empty
empty 		empty
empty
empty
empty 		empty
empty 		empty
empty
empty
empty 		empty
empty 		empty
empty
empty
empty 		empty
empty 		empty
empty

Set a label on your slot and it will show up above to help you remember. If you are unsure about slot settings, test it out first by browsing to the login page and use a keyboard to login. Learn more about slots . Learn more about slots .

Keyboard Type Speed
(1 = slowest, 4 = default, 10 = fastest)
Keyboard Layout
Indicator Light (LED) Brightness
(1 = dimmest, 8 = default, 10 = brightest)
Sysadmin Mode
Allow advanced keystroke combinations and system commands?

HMAC User Input Mode
Require a button press for HMAC challenge-response operations?

Full Wipe Mode Only sensitive data is wiped by default.
Full Wipe – Wipe device and firmware must be reloaded.
WARNING - Once set to "Full Wipe" this cannot be changed.

Inactivity Lockout Timer
(1 – 255 Minutes, 30 = default, 0 to disable)
Lock Button The OnlyKey and the computer are locked automatically when this lock button is pressed (0 to disable).
Derived Key User Input Mode
Enable or disable challenge for derived keys (SSH/PGP)

Stored Key User Input Mode
Enable or disable challenge for stored keys (SSH/PGP)

Backup Key Mode
Locked - Backup key may not be changed on device
WARNING - Once set to "Locked" this cannot be changed.

* = device must be in config mode to change

Use the [Keys] tab to load OpenPGP or OpenSSH keys onto your OnlyKey. Keys can be used with OnlyKey Agent and OnlyKey Webcrypt.

Need an OpenPGP key? Follow our guide here for generating an OpenPGP key with Keybase.

Before loading a key, you must first put your OnlyKey into config mode.

To do this hold down button #6 on your OnlyKey for 5+ seconds and release. hold down button #1 on your OnlyKey DUO for 10+ seconds and release. The light will turn off. If a PIN was previously set, re-enter the PIN to enter config mode. You will notice the OnlyKey flashes red in config mode.

Load Private Key (PEM Format OpenPGP or OpenSSH)





(This setting uses the above key for secure backups instead of any backup passphrase you might have set earlier.)

Backup

Step 1. To begin backup, ensure that you have a backup passphrase set and have an offline copy of this backup passphrase. The same passphrase will be required to restore your OnlyKey.

Step 2. Click inside the text area below. Hold the #1 button down on your OnlyKey for 5+ seconds and release. This will TYPE out an encrypted backup of your OnlyKey into the text area.

Step 3. Once you see "-----END ONLYKEY BACKUP-----", the backup process is complete. Click [Verify Backup] to verify the backup integrity, or [Save File] to save your encrypted backup.






onlykey-backup-[timestamp].txt

Restore

Step 1. To restore a backup file to your OnlyKey, ensure you have loaded the same backup passphrase or backup key you used to create the backup.

Step 2. Hold down button #6 on your OnlyKey for 5+ seconds and release. Hold down button #1 on your OnlyKey DUO for 10+ seconds and release. The light will turn off. If a PIN was previously set, re-enter the PIN to enter config mode. You will notice the OnlyKey flashes red in config mode.

Step 3. Click [Choose File], select your backup file, then click [Restore to OnlyKey].

Step 4. Restore can take up to 1 minute to complete, the OnlyKey will automatically reboot when restoring is complete.





Load Firmware





Add Yubikey Security Info (Legacy)





Add Private Key











Securely use OpenPGP in the browser with OnlyKey WebCrypt




Securely use OpenPGP and SSH on a local computer with OnlyKey Agent



Your OnlyKey has been successfully configured.

Please unplug and reinsert your OnlyKey to continue setting up your slots.

Please connect your OnlyKey

Working...

Please wait

Your OnlyKey is locked

Please enter your PIN

Your OnlyKey DUO is locked

Please enter your PIN

To prevent lockout, OnlyKey only permits 3 failed PIN attempts at a time.

Please remove and reinsert OnlyKey to try again.

Incorrect PIN entered

Please try again.

WARNING:
You are about to wipe everything from this slot,
including all login and MFA data!

WIPE OnlyKey Slot 1a?

Please choose a key

Multiple keys were extracted. Please choose which one to save.

OnlyKey Slot 1a Configuration

Check the box/radio next to the fields you want to set

Re-enter Password
Keyboard Type Speed
(1 = slowest, 4 = default, 10 = fastest)
Options below are for two-factor authentication:


cancel [x]
Slots correspond to the buttons on OnlyKey, for example pressing button #1 will type login information from slot [1a] and holding button #1 for 1 second with type login information from slot [1b]. Press both buttons #1 and #2 at the same time for slot 3.

Example #1

Configure button 1 press (touch for less than 1 sec) to automatically type a password:
Click button [1a]
Check boxes next to [Password] and [Return after Password]
Enter/re-enter password and click [Set Slot]
OnlyKey DUO only supports static-password OR Multi-Factor (MFA) when a device PIN has not been set. A device PIN can be set from the OnlyKey App Setup tab and provides extra physical security. Once a device PIN has been enabled additional login information such as username and URL may be added to slots.

Example #2

Configure button 1 long-press (touch more than 1 sec) to type a username and password into a login form:
Click button [1b]
Configure a password as in example #1 for 1b
Check boxes next to [Username] and [Tab after Username]
Enter a username and click [Set Slot]

Example #3

Configure button 2 tap to automatically type the URL of a login page into your browser, followed by a username and password:
Click button [2a]
Configure username/password as in example #2 for 2a
Check boxes next to [URL] and [Delay]
Type a URL and a delay in seconds (time to wait for URL to load) and click [Set Slot]