Skip to content
Launchpad Introduces USB FIDO2 Security Key Support for API Access

Launchpad Introduces USB FIDO2 Security Key Support for API Access

First seen 3 Nov 2026, 20:51 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 22:46 UTC
  • •Launchpad now supports USB FIDO2 security keys for API access.
  • •The new system enhances security by binding OAuth refresh grants to physical keys.
  • •Developers must install the python3-fido2 package to use this feature.

Canonical has implemented USB FIDO2 security key support for Launchpad, enhancing security for developers by requiring a physical key for API access. This update aims to protect against unauthorized access that could occur if login credentials are compromised. The new system replaces traditional long-lived OAuth access tokens with a hardware-bound OAuth refresh grant, which can only be exchanged for a short-lived access token when the security key is present. Developers must have a compatible USB key and the python3-fido2 package installed to utilize this feature. The change is particularly relevant for core developers who face higher risks of targeted attacks. The support for hardware tokens is optional, and only USB keys are currently supported, excluding NFC and passkeys stored on devices.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 6h ago How this analysis works

Timeline

2026-11-03
Launchpad FIDO2 support announced
Canonical announced the addition of USB FIDO2 security key support to Launchpad, enhancing API security for developers.
OMG! Ubuntu

More articles in this cluster (3)

Extracted Entities (1)

1 / 2

Common questions

What is the benefit of using a FIDO2 key?
Using a FIDO2 key significantly reduces the risk of unauthorized API access by requiring physical possession of the key.
Are there any specific requirements to use this feature?
Yes, developers need a compatible USB FIDO2 key and must install the python3-fido2 package.
Is this security feature mandatory for all developers?
No, the use of hardware tokens is optional for developers on Launchpad.