YubiClicker: FIDO2 assertion-based clicker game with physical security keys

YubiClicker is a lean, conceptual exercise in hardware-software interaction. By replacing the standard DOM click event with a FIDO2 assertion, the developer has effectively created a 'Proof-of-Presence' game. While the premise is simple—climbing a leaderboard through repetitive physical action—the technical implementation leverages the WebAuthn API to ensure that each 'point' is backed by a cryptographic signature from a physical security key. From a product perspective, the project is a clever piece of 'security art.' It strips away the typical utility of a YubiKey (protecting an account) and repurposes it as a tactile input device. The decision to disqualify software-based passkeys from the leaderboard is the critical design choice here; it preserves the integrity of the competition by eliminating the possibility of script-based clicking, forcing users to engage in actual physical labor. However, the experience is hindered by the inherent friction of the FIDO2 flow. The repeated prompt for user gesture and the potential interference from password managers (as noted in the site's own warnings) make the UX clunky. It is not a 'game' in the traditional sense of engagement, but rather a novelty that tests the durability of your hardware and the patience of the user. This is a niche curiosity for the 'security-obsessed' crowd. It's less about gaming and more about the satisfaction of seeing a hardware standard used in an absurdly impractical way. If you own a YubiKey and want to see how many assertions your browser can handle before lagging, this is your playground.