fido2-token

List connected tokens

$ fido2-token -L

$ fido2-token -I [/dev/hidraw0]

$ fido2-token -S [/dev/hidraw0]

$ fido2-token -C [/dev/hidraw0]

$ fido2-token -R [/dev/hidraw0]

$ fido2-token -L -r [/dev/hidraw0]

fido2-token [options] [device]

fido2-token manages FIDO2/WebAuthn security keys. It can list, configure, and reset hardware tokens like YubiKeys, SoloKeys, and other FIDO2 authenticators.
The tool is part of libfido2 and provides command-line access to token management functions typically accessed through browser WebAuthn APIs.

-L

List connected tokens.

Get device information.

Set new PIN.

Change existing PIN.

Reset device (dangerous).

With -L, list resident credentials.

With -L, list biometric templates.

Blob (largeBlob) operations.

Debug output.

Tokens appear as HID devices:
- Linux: /dev/hidraw*
- macOS: ioreg device path

Requires appropriate permissions (udev rules on Linux). Reset destroys all credentials on device. PIN operations may lock out token after too many failures. Not all tokens support all features.

fido2-token is part of libfido2, developed by Yubico and first released around 2019. It provides open-source tooling for the FIDO2 standard, which succeeded U2F for strong authentication.

fido2-cred(1), fido2-assert(1), ykman(1)