U2F Chrome deprecation - any plans forward ?

[vlad]

Chrome will remove U2F support in March 2022 (assuming bitbucket is "on the Deprecation Trial")

https://groups.google.com/a/chromium.org/g/blink-dev/c/xHC3AtU_65A?pli=1

Milestone	Approximate stable date	Actions
M93	August 2021	Support googleLegacyAppIdSupport extension
M94	September 2021	Gate U2F API requests behind a user permission prompt Log a deprecation notice in Developer Console for every request Start a Deprecation Trial; keep the U2F API enabled by default
M98	February 2022	Disable the U2F API by default; but keep it available to sites on the Deprecation Trial
M100	March 2022	Fully remove the U2F API

They push for the newer FIDO2/WebAuthn apis.

Are there any plans for Bitbucket Cloud to support this ?

[Theodora Boudale · Accepted solution]

Hi everyone,

Bitbucket Cloud is upgrading to WebAuthn API. We have published a community article about this:

• https://community.atlassian.com/t5/Bitbucket-articles/Bitbucket-is-upgrading-to-the-Web-Authentication-API-WebAuthn/ba-p/1921532

If you have any questions, please add them in a comment in that article!

Kind regards,
Theodora

[hanskokx]

It's coming even sooner in Edge. Guys, I seriously don't want to be locked out of my repos next month.

[Henrik]

Any new on roadmap for this would be good, from guides from 2019 it appears non trivial to migrate. One way street after switching to WebAuthn API's, with regards to server side.
So would very much like to know if it is on the road map to be fixed, or if we all should switch to OTP for 2FA. Same sentinment as others here, would not like to find myself locked out from my account.

[kjkent]

I'm also removing my Yubikey from Bitbucket until the migration is done. Would be great if an Atlassian/Bitbucket staffer could reply to this thread.