# Fido2 not functioning on firefox build

**URL:** https://discourse.nixos.org/t/fido2-not-functioning-on-firefox-build/81137
**Category:** Help
**Created:** [November 11, 2026, 1:31pm UTC](https://discourse.nixos.org/t/fido2-not-functioning-on-firefox-build/81137 "2026-11-11T13:31:51Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![MiaNotAPancake](https://discourse.nixos.org/letter_avatar_proxy/v4/letter/m/a87d85/32.png) [@MiaNotAPancake](https://discourse.nixos.org/u/MiaNotAPancake)
#### Post date: [November 11, 2026, 1:31pm UTC](https://discourse.nixos.org/t/fido2-not-functioning-on-firefox-build/81137/1 "2026-11-11T13:31:51Z")

</div>

Hey NixOS community,

Today I was trying to set up a passkey on my Token2 security key with WebAuthn, but got a generic missing pin error from Firefox while using the default `firefox` package. The CLI reporting the following error:

```bash
[ERROR authenticator::ctap2] Error when determining pinAuth: PinError(PinNotSet)

```

I then tried it in Chromium which worked as expected, then tried doing the same in `firefox-bin` and it worked flawlessly. So seemingly something in the `firefox` package is preventing WebAuthn from working properly. Is this a known problem? And if so, is there a workaround?

---

<div class="post-metadata">

### Author: ![symphorien](https://discourse.nixos.org/user_avatar/discourse.nixos.org/symphorien/32/546_2.png) [@symphorien](https://discourse.nixos.org/u/symphorien)
#### Post date: [November 11, 2026, 9:00pm UTC](https://discourse.nixos.org/t/fido2-not-functioning-on-firefox-build/81137/2 "2026-11-11T21:00:14Z")

</div>

My information might be dated, but at some point in the past, firefox could only use fido2 hardware _whose pin code had already been set with some other software_. So I think the scenario is:

- your brand new key has no pin code
- you fail to use it with firefox because it has no pin code
- you try to use it with chrome, so chrome offers to set a pin code on first use
- you try again to use it with firefox (the fact that it is the -bin variant does not matter) and it works because the pin code is now set

---

<div class="post-metadata">

### Author: ![magicquark](https://discourse.nixos.org/user_avatar/discourse.nixos.org/magicquark/32/33894_2.png) [@magicquark](https://discourse.nixos.org/u/magicquark)
#### Post date: [November 11, 2026, 10:52pm UTC](https://discourse.nixos.org/t/fido2-not-functioning-on-firefox-build/81137/3 "2026-11-11T22:52:36Z")

</div>

> [@symphorien](#):
>
> My information might be dated, but at some point in the past, firefox could only use fido2 hardware _whose pin code had already been set with some other software_

This is still true. [This](https://bugzilla.mozilla.org/show_bug.cgi?id=1819346) is the upstream bug that remains open.

I set my hardware security key up with a passkey a few weeks ago and ran into this same exact error.

I had to use `pkgs.fido2-manage` to so this.