FIDO U2F API

- UNOFF

JavaScript API to interact with Universal Second Factor (U2F) devices. This allows users to log into sites more securely using two-factor authentication with a USB dongle.

Chrome

  1. ❌ 4 - 37: Not supported
  2. ❌ 38 - 40: Not supported
  3. ✅ 41 - 97: Supported
  4. ❌ 98 - 105: Disabled by default
  5. ❌ 106 - 155: Not supported
  6. ❌ 156: Not supported
  7. ❌ 157 - 159: Not supported

Edge

  1. ❌ 12 - 18: Not supported
  2. ✅ 79 - 105: Supported
  3. ❌ 106 - 154: Not supported
  4. ❌ 155: Not supported

Safari

  1. ❌ 3.1 - 12.1: Not supported
  2. ✅ 13 - 26.6: Supported
  3. ✅ 27: Supported
  4. ✅ 27.1 - TP: Supported

Firefox

  1. ❌ 2 - 46: Not supported
  2. ❌ 47 - 66: Disabled by default
  3. ✅ 67 - 111: Supported
  4. ❌ 112 - 113: Disabled by default
  5. ❌ 114 - 158: Not supported
  6. ❌ 159: Not supported
  7. ❌ 160 - 162: Not supported

Opera

  1. ❌ 9 - 39: Not supported
  2. ✅ 40: Supported
  3. ❌ 41: Not supported
  4. ✅ 42 - 134: Supported
  5. ✅ 135: Supported

IE

  1. ❌ 5.5 - 10: Not supported
  2. ❌ 11: Not supported

Chrome for Android

  1. ❌ 156: Not supported

Safari on iOS

  1. ❌ 3.2 - 13.2: Not supported
  2. ✅ 13.3 - 26.6: Supported
  3. ✅ 27.0: Supported
  4. ✅ 27.1 - 27.2: Supported

Samsung Internet

  1. ❌ 4 - 29: Not supported
  2. ❌ 30: Not supported

Opera Mini

  1. ❌ all: Not supported

Opera Mobile

  1. ❌ 10 - 12.1: Not supported
  2. ❌ 80: Not supported

UC Browser for Android

  1. ❌ 15.5: Not supported

Android Browser

  1. ❌ 2.1 - 4.4.4: Not supported
  2. ❌ 156: Not supported

Firefox for Android

  1. ✅ 159: Supported

QQ Browser

  1. ❌ 14.9: Not supported

Baidu Browser

  1. ❌ 13.52: Not supported

KaiOS Browser

  1. ❌ 2.5: Disabled by default
  2. ✅ 3: Supported

The U2F API is being decommissioned (only the API, not the U2F protocol) and superseded by WebAuthn.

Resources:
Mozilla bug
Mozilla Firefox bug to remove the U2F API
Chrome platform status: U2F Security Key API removal (Cryptotoken Component Extension)
Chromium Intent to Deprecate and Remove: U2F API (Cryptotoken)
Google Security article
Yubico blog post about the decommission