Yubioath Flutter is an open-source companion app for YubiKeys that generates OATH one-time passwords directly from hardware. It eliminates mobile phone account takeover risks by securing two-factor credentials completely offline without network connectivity.
Technical Overview of Yubioath Flutter
Operating as a cross-platform desktop installer, the application interfaces directly with USB and NFC-enabled YubiKeys to read and provision credentials. It handles cryptographic tasks locallyâincluding WebAuthn/FIDO passkeys and PIV managementâwithout sending telemetry or requiring an internet connection. Storing secrets strictly on hardware tokens ensures zero persistent credentials remain exposed on the host operating system.
Core Features of Yubioath Flutter
- Hardware-backed OATH storage ensures multi-factor codes remain isolated on physical keys rather than host memory.
- Passkey and FIDO management allows users to configure PINs, manage WebAuthn credentials, and enroll fingerprints locally.
- PIV certificate configuration handles management keys, PIN/PUK setups, and private key imports securely offline.
- Slot credential provisioning enables static passwords, Yubico OTP, and full factory resets across any supported security key.
System Compatibility
Available for 64-bit Windows 10 and above.