Google Bug: Cannot add a Hardware Security Key if PassKeys are Not Enabled

Hardware keys are enabled on my account and I’m using them

I created a new user in a Google Workspace. The user logs in and can’t add a Yubikey because I haven’t enabled passkeys on the account.

Two different things.

I can add a hardware security key in the admin dashboard so why can’t this user add one on their account?

Not everyone wants to use passkeys. No, I do not want my face, fingerprint, etc. stored on my device even though it is supposedly never shared with Google. I want to use a password.

You cannot rotate biometric data.

There have already been instances where biometric data has been stolen.

Why is Google trying to force people to do this. Would like to know.

Please fix this ASAP Google.

To get around this click the button to Create a passkey even though that’s not what you are going to do.

On the next screen choose Use another device.

I wasted too much time trying to figure that out.

Well here’s the interesting thing. Even after adding the YubiKey as a regular hardware security key, it’s still calling it a passkey when I login. This is confusing. What is Google trying to do here?

Follow for updates.

Teri Radichel | © 2nd Sight Lab 2024

About Teri Radichel:
~~~~~~~~~~~~~~~~~~~~
⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab

Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation

Follow for more stories like this:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
❤️ Sign Up my Medium Email List
❤️ Twitter: @teriradichel
❤️ LinkedIn: https://www.linkedin.com/in/teriradichel
❤️ Mastodon: @teriradichel@infosec.exchange
❤️ Facebook: 2nd Sight Lab
❤️ YouTube: @2ndsightlab