Cannot login to Github using "Approve" due to CryptoTokenKit error

[Snayx]

When trying to approve from iOS GitHub App, it throws error:
The operation couldn't be completed. (CryptoTokenKit error -3.)
I’ve tried

• cleaning cache
• Reinstalling app
• Use different networks

As a workaround I've used the regular 6 digit key from the authenticator I have.

ℹ️ Additional Debug Info

GitHub for iOS, Version 1.215.0 (166329344)

Device: iPhone17,2 (iOS 19.0)

[MaSTERmIKK]

Hi @Snayx

The error you're encountering:

"The operation couldn't be completed. (CryptoTokenKit error -3.)"

is related to macOS/iOS security frameworks specifically CryptoTokenKit, which is responsible for handling secure authentication mechanisms, including FIDO2/WebAuthn tokens, YubiKeys, biometrics, or passkeys.

What Causes CryptoTokenKit error -3?
The system is unable to access a secure element (e.g., hardware token, FaceID, TouchID, or a security key).

It’s often seen when:

Using Passkeys on iOS/macOS

Approving a sign-in via biometric auth through the GitHub app

GitHub is requesting WebAuthn but the secure token store fails to respond

i hope this help u.

[Snayx]

Hi @MaSTERmIKK !

Sorry for the late response.
Considering the Github app I do not use the "sign-in via biometric auth" and/or passkeys for it.

Thanks for the explanation anyways on what leads to this issue typically.
I will still keep this bug opened because it is an active problem with the iOS application and the only workaround is to use the 2FA.

I'm pretty sure this isn't a critical priority issue and not on the top of the list for the devs but at least it is noted.

Thanks again!

[gitgik]

This happens on ios 18.5 and needs the attention it deserves.
I was frustrated for about a week trying to get Copilot enterprise access and this just happened to be the auth method at my disposal. I had to recover my acc using github recovery codes (thank God I had them saved somewhere). I've since added a new method to authenticate

[HookDing]

I encountered the same problem, but I just solved it.

The solution is to log out of GitHub Mobile and log back in.
It will prompt you for 2FA verification.
After entering the 2FA verification code to log in to GitHub Mobile, you can then approve your web login.

[drmartell]

Am I the only surprised that to log out (at least on iOS) you have to long press the profile nav button; swipe left on the Account you want to log out of and tap "Sign out"

This did resolve it for me

[0x384c0]

You will always get this error after restoring iPhone from backup or after migrating to new iPhone.
I guess private keys form CryptoTokenKit are lost in that case and mobile app just cannot handle this case.

[asilarslan]

thanks