[
  {
    "id": "yubikey-docs-1",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/",
    "excerpt": "Build a backend application that supports passkeys",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-2",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/",
    "excerpt": "Yubico has developed a range of mobile SDKs, such as for iOS and Android, and also desktop SDKs to enable developers to rapidly integrate hardware security into their apps",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-3",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/",
    "excerpt": "YubiKey 5.8 is here — hardware signing, CTAP 2.3, and smoother passkey UX.",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-4",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/yubikey-manager/",
    "excerpt": "Configure your YubiKey via the command line.",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-5",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/SSH/Securing_SSH_with_FIDO2.html",
    "excerpt": "FIDO2 security keys, such as the YubiKey, strengthen SSH security by ensuring your private SSH keys never leave the hardware security key.",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-6",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/SSH/Securing_SSH_with_FIDO2.html",
    "excerpt": "FIDO2 also requires user presence (a touch on your YubiKey) for cryptographic operations, and can optionally enforce user verification (PIN entry).",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-7",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/OATH/",
    "excerpt": "the shared secrets are stored and processed in the YubiKey's secure element",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-8",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/PIV/",
    "excerpt": "It enables RSA or ECC sign/encrypt operations using a private key stored on a smartcard (such as the YubiKey), through common interfaces like PKCS#11.",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-9",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/PGP/",
    "excerpt": "OpenPGP is an open standard for signing and encrypting. It enables RSA or ECC sign/encrypt operations using a private key stored on a smartcard (such as YubiKeys)",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-10",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/OTP/",
    "excerpt": "No client software needed. The OTP is just a string. If you can send a password, you can send an OTP.",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-11",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/PIV/Introduction/PIV_attestation.html",
    "excerpt": "The concept of attestation is used to show that a certain asymmetric key has been generated on device and not imported.",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-12",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/java-webauthn-server/",
    "excerpt": "Provides implementations of the Relying Party operations required for a server to support Web Authentication, including passkey authentication.",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-13",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/python-fido2/",
    "excerpt": "Provides library functionality for communicating with a FIDO device over USB as well as verifying attestation and assertion signatures.",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-14",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/Passkeys/",
    "excerpt": "Passkeys are the long awaited replacement for passwords.",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-15",
    "tier": "claimed-docs",
    "url": "https://docs.yubico.com/hardware/yubikey/yk-tech-manual/yk5-firmware-overview.html",
    "excerpt": "The quickest and most convenient way to determine your device's firmware version is to use either the Yubico Authenticator ... or ykman",
    "fetchedAt": "2026-09-15T18:59:04.942Z"
  },
  {
    "id": "yubikey-docs-16",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/WebAuthn/",
    "excerpt": "the WebAuthn API enables servers to register and authenticate users using public key cryptography instead of a password",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-docs-17",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/Passkeys/",
    "excerpt": "this guide will provide all the necessary technical knowledge required to adopt passkeys into your application",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-docs-18",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/PIV/Introduction/PIV_attestation.html",
    "excerpt": "This certificate should be used for the purpose of verifying that the key was generated in device.",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-docs-19",
    "tier": "claimed-docs",
    "url": "https://docs.yubico.com/yesdk/",
    "excerpt": "The SDK allows you to integrate the YubiKey and its applications into your .NET-based application or library.",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-docs-20",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/yubikit-android/",
    "excerpt": "YubiKit is an Android library provided by Yubico to enable YubiKey support in Android apps. Both USB and NFC-enabled YubiKeys are supported.",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-docs-21",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/yubikit-ios/",
    "excerpt": "The library supports NFC-enabled YubiKeys and provides the APIs to request an OTP (Yubico OTP or HOTP) from the NFC YubiKeys using a NFC-enabled iOS device.",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-docs-22",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/yubikit-android/",
    "excerpt": "provides a high-level FIDO2/WebAuthn client with built-in UI components, WebView integration, and customizable theming",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-docs-23",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/SSH/",
    "excerpt": "you can generate the private key directly on the hardware, where it cannot be exported or extracted",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-docs-24",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/SSH/Securing_SSH_with_FIDO2.html",
    "excerpt": "This guide shows how to generate and use SSH keys directly on your FIDO2 security key with OpenSSH.",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-docs-25",
    "tier": "claimed-docs",
    "url": "https://docs.yubico.com/hardware/yubikey/yk-tech-manual/yk5-firmware-overview.html",
    "excerpt": "The quickest and most convenient way to determine your device's firmware version is to use either the Yubico Authenticator with its intuitive and easy-to-use (GUI) interface or ykman",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-docs-26",
    "tier": "claimed-docs",
    "url": "https://developers.yubico.com/PGP/",
    "excerpt": "It enables RSA or ECC sign/encrypt operations using a private key stored on a smartcard (such as YubiKeys), through common interfaces like PKCS#11.",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-docs-27",
    "tier": "claimed-docs",
    "url": "https://www.yubico.com/",
    "excerpt": "YubiKey — strongest hardware-backed passkey",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-docs-28",
    "tier": "claimed-docs",
    "url": "https://docs.yubico.com/",
    "excerpt": "YubiKeys are hardware authentication devices that protect user access to computers, networks, and online accounts and services through phishing-resistant multi-factor authentication and passwordless login.",
    "fetchedAt": "2026-09-15T19:03:03.922Z"
  },
  {
    "id": "yubikey-comm-1",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=41434500",
    "excerpt": "An attacker not only needs your username and password, they also need physical access to your key. They then have to disassemble the device... So not exactly trivial! A blob of nail-varnish over a plastic seam might be a useful canary.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-2",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=41434500",
    "excerpt": "I think the most annoying part of this is that you cannot just replace a YubiKey. You need to manually go through each account and replace the YubiKey with a non-vulnerable key before decommissioning this one.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-3",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=41434500",
    "excerpt": "YubiKey Firmware is Not Upgradable... So, Yubico is providing free replacements, right? I have a handful of these Yubikeys…",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-4",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=41434500",
    "excerpt": "Don't have high hopes for this but I just requested a replacement device through their support system as the offered mitigations are not something I would like to consider.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-5",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=41434500",
    "excerpt": "Previously when their Yubikey 4's were found to be susceptible to the ROCA vulnerability, they issued replacements for any customers who had affected devices. I had a few of those devices and they were replaced for free. I guess that's a disadvantage of having a non-upgradable firmware.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-6",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=41434500",
    "excerpt": "They really should [issue replacements]. The recovery of the one secret the device is supposed to keep is catastrophic. Sure, the recovery itself might be an edge case, but Yubikey users buy the product to protect themselves from edge cases.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-7",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=41434500",
    "excerpt": "I have redundant keys for backup access. But I have no idea which accounts I used the lost key for, in order to log into them one by one to revoke the key. How does everyone here keep track? A post-it note in the cookie jar?",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-8",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=41434500",
    "excerpt": "Not being able to flash the firmware is a feature, not a bug :) Its the fundamental reason I won't buy NitroHSM because of the unknown-unknowns about use of the firmware flash feature on NitroHSMs as a future exploit route.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-9",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=41434500",
    "excerpt": "Yubico hardware [is] more compact and less bulky than anything else out there... Yubico software [has an] extensive featureset with more controllability than most other products out there. Also Yubico is one of the few that does not permit firmware flashing.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-10",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=24663989",
    "excerpt": "The whole point of this touch to sign is that it can't be hacked remotely :) and you can just turn it off for most modes.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-11",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=24663989",
    "excerpt": "A little off topic: Does anyone know of a way to get the results of a yubikey press into a remote desktop session? I frequently remote desktop into laptops that are in arms reach. If I need to use the yubikey, I have to remove it and plug it into my desktop and press it, since it acts as a local keyboard.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-12",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=24663989",
    "excerpt": "A slight aside, but so many of these keys seem to have the touch point/button applying force perpendicular to the direction of insertion, I wonder if there is any long-term potential to cause damage to the USB interface.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-13",
    "tier": "community",
    "url": "https://hn.algolia.com/api/v1/items/35091768",
    "excerpt": "This part can be frustrating for a novice adopting security keys. The key works out of the box without PIN. If you didn't come across the right guidance, you already enrolled keys without a PIN and now discover that you need to unenroll everywhere, set a PIN, and enroll again.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-14",
    "tier": "community",
    "url": "https://hn.algolia.com/api/v1/items/35091768",
    "excerpt": "So far, Yubikeys are the only ones I've found that support both FIDO2/WebAuthn as well as GPG smart card functionality for use with pass(1). They also support ed25519 FIDO SSH keys, whereas all the cheapo FIDO keys I've tested only support ecdsa-nistp256.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-15",
    "tier": "community",
    "url": "https://hn.algolia.com/api/v1/items/35091768",
    "excerpt": "Unfortunately SoloKey doesn't work as an OpenPGP smart card, which means it's not a real substitute for a Yubikey.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-16",
    "tier": "community",
    "url": "https://hn.algolia.com/api/v1/items/35091768",
    "excerpt": "Also, yubikey works as a PIV smartcard.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-17",
    "tier": "community",
    "url": "https://hn.algolia.com/api/v1/items/35091768",
    "excerpt": "A Yubikey is just a proprietary smartcard with a bunch of apps installed and some HID emulation (pretending to be a keyboard, which you likely do not want).",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-18",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=14863580",
    "excerpt": "Yubikeys tend to wear out your USB ports after a bit I found, at least on my X201 and the X61 that preceded it.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-comm-19",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=14863580",
    "excerpt": "P.S. don't travel with a yubikey that isn't partnered with another. Would be a bummer to lose.",
    "fetchedAt": "2026-09-15T19:06:08.612Z"
  },
  {
    "id": "yubikey-probe-1",
    "tier": "probe",
    "url": "https://docs.yubico.com/llms.txt",
    "excerpt": "PROBE llms.txt: HTTP 404 at https://docs.yubico.com/llms.txt",
    "fetchedAt": "2026-09-15T19:07:26.364Z"
  },
  {
    "id": "yubikey-probe-2",
    "tier": "probe",
    "url": "https://docs.yubico.com/.md",
    "excerpt": "PROBE docs-md: HTTP 404 at https://docs.yubico.com/.md",
    "fetchedAt": "2026-09-15T19:07:26.364Z"
  },
  {
    "id": "yubikey-probe-3",
    "tier": "probe",
    "url": "https://docs.yubico.com/openapi.json",
    "excerpt": "PROBE openapi: all candidate paths 404 (https://docs.yubico.com/openapi.json, https://docs.yubico.com/swagger.json, https://docs.yubico.com/api/openapi.json, https://docs.yubico.com/.well-known/openapi.json)",
    "fetchedAt": "2026-09-15T19:07:26.364Z"
  },
  {
    "id": "yubikey-probe-4",
    "tier": "probe",
    "url": "https://developers.yubico.com/yubikey-manager/",
    "excerpt": "official CLI documented at https://developers.yubico.com/yubikey-manager/",
    "fetchedAt": "2026-09-15T19:07:26.364Z"
  },
  {
    "id": "yubikey-probe-rt-1",
    "tier": "probe",
    "url": "https://developers.yubico.com/yubikey-manager/",
    "excerpt": "PROBE runtime (recorded 2026-09-15): Yubico's official ykman CLI installs keylessly from public registries and identifies itself — `uvx --from yubikey-manager ykman --version` → 'YubiKey Manager (ykman) version: 5.9.2'; Homebrew packages it as ykman ('Tool for managing your YubiKey configuration'). Full scriptable device management: enable applications, PINs, PIV/OATH/OTP slots, device info.",
    "fetchedAt": "2026-09-15T19:07:47.000Z"
  },
  {
    "id": "yubikey-probe-rt-2",
    "tier": "probe",
    "url": "https://console.yubico.com/apidocs/",
    "excerpt": "PROBE runtime (recorded 2026-09-15): the YubiEnterprise 'YubiKey as a Service' REST API documentation is live and public at console.yubico.com/apidocs/ (page title verified keylessly) — the documented programmatic surface for fleet delivery, inventory, and shipment management.",
    "fetchedAt": "2026-09-15T19:07:47.000Z"
  },
  {
    "id": "yubikey-probe-rt-3",
    "tier": "probe",
    "url": "https://developers.yubico.com/python-fido2/",
    "excerpt": "PROBE runtime (recorded 2026-09-15): Yubico's python-fido2 SDK resolves on the public PyPI registry (fido2 2.2.1), alongside yubikey-manager 5.9.2 — the building blocks for integrating and automating the key from code.",
    "fetchedAt": "2026-09-15T19:07:47.000Z"
  },
  {
    "id": "yubikey-probe-rt-4",
    "tier": "probe",
    "url": "https://docs.yubico.com/",
    "excerpt": "PROBE runtime negative (recorded 2026-09-15): Yubico publishes no llms.txt on any host — https://docs.yubico.com/llms.txt answers HTTP 404 (developers.yubico.com and www.yubico.com 404 as well), and appending .md to developers.yubico.com pages answers HTTP 300 'Multiple Choices', not markdown. Docs are human-oriented HTML only; no MCP endpoint exists (mcp.yubico.com does not resolve).",
    "fetchedAt": "2026-09-15T19:07:47.000Z"
  }
]