Swapping Yubico OTP from slot 1 to slot 2


You may occasionally find that you want to move the factory-programmed Yubico OTP from its location in slot 1 to slot 2. One reason you might want to do this is to avoid accidentally sending an OTP code by incidentally tapping the capacitive touch sensor on the YubiKey. Moving the Yubico OTP to slot 2 requires a "tap and hold" (slot 1 requires just a short tap). This can be done using either Yubico Authenticator or YubiKey Manager (CLI).

 

manual-icon.svg Note:  Moving a credential from slot 1 to slot 2, or vice-versa will not otherwise modify it. For instance, swapping slots will not affect the functionality, prefix ("cc" vs "vv"), etc. of the Yubico OTP credential that comes in slot 1 on all YubiKeys from the factory.

Option 1 - Using Yubico Authenticator

  1. Download and install Yubico Authenticator
  2. Open Yubico Authenticator
  3. Insert your YubiKey
  4. Open Slots ()
  5. Click Swap slots (if you don't see this option, expand the kebab menu at the top right)
  6. Click Swap to confirm

 

Option 2 - Using YubiKey Manager CLI

  1. Download and install YubiKey Manager (CLI)
  2. Open Command Prompt as Administrator (Windows) or Terminal (Mac / Linux)
  3. Run the following command: 
    ykman otp swap
  4. When prompted, press Y and then Enter to confirm the swap