Binance + Physical Key doesn't fully work.

Hey guys,

Just wanted to point out that the Yubikey functionality within Binance (tested this morning on my own account on iPhone and Web Browser) doesn't fully work and after speaking to someone from Binance in their live chat, they said the following... " the relevant team has considered this issue also. However, as for now, resetting the password did not require the Yubikey check. However, other activity that you perform in Binance for example log in, etc, it required Yubikey and other 2FA as well. Sorry for the inconvenience ".

Essentially, the Yubi settings within Binance have 3 options which can be turned on:

Reset Password, Login, Withdraw/API

I tested both Reset Password, and Withdraw, and I could do both without requiring the Yubikey. I know some people that only have Login unticked in their settings, as they prefer not to tap the Yubi every time they log-in, whilst having the peace of mind that their account password can't be reset, or no withdrawals can be made. However after testing this out earlier, it seems that only the Login setting actually works which is slightly concerning.

I guess the takeaway is that if you have Login unticked, make sure your email has the lowest chance of being compromised. The guy from Binance said the Security team has "considered this" which I hope they fix because this is obviously a flaw in their system.

This isn't extremely serious or high risk, but I'd love for this to be fixed.. Not spreading FUD either as I love Binance but would like to see this resolved.