FIDO U2F is a two-factor authentication method (2FA) developed by the FIDO Alliance that is supported on the Ledger Nano S and Ledger Blue devices. It works with several web services, like Facebook, Dashlane, Gmail, Dropbox, GitHub, etc.
- FIDO U2F increases your account security as both your password and Ledger device are required to login.
- FIDO U2F is not related to cryptocurrencies. It's an additional utility for your Ledger device.
Prerequisites
- A Ledger Nano S or Ledger Blue with the latest firmware version.
- Ledger Live should be downloaded and installed.
Instructions
Set up FIDO U2F
- Open the Manager in Ledger Live.
- Connect and unlock your Ledger device.
- If asked, allow the manager on your device by pressing the right button.
- Find FIDO U2F in the app catalog.
- Click the Install button of the app.
- An installation window appears.
- Your device will display Processing...
- The app installation is confirmed.
- Open FIDO U2F from the dashboard of your device.
- Go to the security parameters of web services partnering with FIDO U2F and follow their instructions to register your device: Facebook, Dashlane, Google, GitHub, Dropbox.
Always ensure you set up an alternative login method. Reinstalling FIDO U2F requires you reconfigure it for each service.
Restore FIDO U2F after a firmware update
The FIDO U2F app on your Ledger device maintains an internal counter that changes each time you use FIDO U2F to login on a third party service. After a firmware update, all apps have to be reinstalled. Unfortunately, this means that the counter is reset and you will not be able to login using the FIDO U2F app on your device before reconfiguring the services you use it on:
- Please use an alternative means of logging in onto the services you want to access (authenticator app / one time password / request a password reset link by email).
- Once logged in, go into the (security) settings of the services on which you use FIDO U2F. Then, remove FIDO U2F with your Ledger device as a method of authentication.
- Re-register your device as authentication method.