ykclient(1)

ykclient1

Yubicloud one-time-password validation client

Usage

ykclient [OPTION] ... CLIENTID YUBIKEYOTP

Overview

Validate the YUBIKEYOTP one-time-password against the YubiCloud using CLIENTID as the client identifier.

Mandatory arguments to long options are mandatory for short options too.

--help

Display this help screen

--version

Display version information

--debug

Print debugging information

--url URL

Validation service URL, for example, "https://api.yubico.com/wsapi/2.0/verify"

--ca CADIR

Path to directory containing Certificate Authoritity, e.g., "/usr/local/etc/CERTS"

--cai CAFILE

Path to a file holding one or more certificated to verify the peer with

--apikey Key

API key for HMAC validation of request/response

--proxy ip:port

Connect to validation service through a proxy, e.g., "socks5h://user:[email protected]:1080"

Exit status is 0 on success, 1 if there is a hard failure, 2 if the OTP was replayed, 3 for other soft OTP-related failures.

Releases

7 releases since Debian 8 (Jessie); the text changed 5 times.

  1. 8
  2. 9
  3. 10
  4. 11–12
  5. 13
  6. Arch

--cai since Debian 9 (Stretch); --proxy since Debian 9 (Stretch).

Reporting bugs

Report bugs at <https://github.com/Yubico/yubico-c-client>.

From yubico-c-client 2.15-7 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.