Merge pull request #232 from captn3m0/warning

[security] Adds warning about PUK being default
3 years ago · 6490586595
parent 1566801177 548b2adf2b
commit 6490586595
1 changed files with 2 additions and 0 deletions
--- a/README.md
+++ b/README.md
@ -4,6 +4,8 @@ Keys stored on YubiKey are [non-exportable](https://support.yubico.com/support/s

 **New!** [drduh/Purse](https://github.com/drduh/Purse) is a password manager which uses GPG and YubiKey.

+**Security Note**: If you followed this guide before Jan 2021, your PUK (Pin Unblock Key) may be set to its default value of `12345678`. An attacker can use this to reset your PIN and use your Yubikey. Please see the [Change PUK](#change-puk) section for details on how to change your PUK.
+
 If you have a comment or suggestion, please open an [Issue](https://github.com/drduh/YubiKey-Guide/issues) on GitHub.

 - [Purchase](#purchase)