Enabling YubiKey and Passkey-Based Two-Factor Authentication (2FA)

Note: This feature is being rolled our gradually and may not be available for your account yet.

Introduction

Two-Factor Authentication (2FA) using YubiKeys and Passkeys adds a highly secure, hardware-based layer of protection to your QReserve account. This guide will help you set up 2FA using these methods, ensuring that access to your account requires something you have (a YubiKey or Passkey) in addition to something you know (your password).

To learn more about what these are and how they work, visit the following links.

• Hardware security keys: What are they, and should you use one?
• What are passkeys?

Requirements

QReserve's 2FA features are available only on accounts that use an email address and password to sign into QReserve. If you sign into QReserve through your company or school then you should check whether that account provides support for 2FA.

Step 1: Accessing 2FA Settings

• Log in to your account: Sign in to your QReserve account using your email and password.
• Navigate to your Profile: Click on the Profile menu item to access your account profile.
• Select 'Account & Security': On your Profile page, find and click on the 'Account & Security' tab.

Step 2: Enabling YubiKey/Passkey 2FA

• Enable 2FA: Inside the 'Profile' tab, you will find an option to 'Add new device' under Authentication Devices.
• Name your device: Give your device a suitable name to help identify and manage it in the future.
• Follow the setup instructions: For YubiKey, insert it into a USB port and touch it when prompted. For a Passkey or other hardware based credential such as Touch ID, follow the on-screen instructions to pair your device with your QReserve account. You will have a 60-second window with which to complete the registration, do please ensure that you have your device ready.

Step 3: Enable Time-Based 2FA or Add an Alternative YubiKey/Passkey

You can enable multiple 2FA devices and protocols at once to act as backups to each other and we recommend doing so if possible to ensure your account is accessible to you at all times.

Step 4: Backup Recovery Options

• Store it securely: It's essential to keep your YubiKey or other hardware device in a safe and accessible place.

Removing a YubiKey or Passkey

Once you have a YubiKey or Passkey on your account, you must have a valid key in order to remove a key.  If you have lost a Yubikey or Passkey device, you will need to add a secondary device to your account prior to removing the lost key.

Conclusion

Setting up YubiKey or Passkey-based 2FA provides a robust layer of security for your QReserve account. Should you need any assistance or have questions, our support team is here to help.