Let’s start with a smartphone. A user creates an account with a passkey for a service, that passkey gets stored on their smartphone, and they can use biometrics to sign in from then on. The private key is stored on the smartphone. Great.

But then how do you sign into that same service from a different device?

If it’s by using a password manager, some third party piece of software, How do you sign in on a device where you’re not allowed to install third party software?

  • @credo
    link
    29
    edit-2
    28 days ago

    How do you sign in on a device where you’re not allowed to install third party software?

    You don’t. Passkeys are very ecosystem-centric right now. If you are in apple, google, or Microsoft entirely, they will all allow you to move your passkeys around to different systems using the same basic mechanism they used for password keeping. Moving across ecosystems is absolutely broken - or rather - has never worked.

    I think there are mechanisms to allow passkeys to work via Bluetooth or even via camera, as an external authenticator essentially, but I’ve never personally tried them.

    • @[email protected]
      link
      fedilink
      728 days ago

      Some password managers support passkeys, such as one password and proton pass, which will allow you to use multiple different devices. Personally, I am waiting for key pass to have proper support before starting to migrate to them.

      • @baatliwala
        link
        15 days ago

        Is keepass actually going to have support for passphrases? The author works in archaic ways and I have a feeling he’s never going to truly support it.

          • @baatliwala
            link
            15 days ago

            I mean regular keepass, I feel like XC is more likely to implement passkeys

            • @[email protected]
              link
              fedilink
              English
              15 days ago

              Okay, I see I have never used a regular one. I think I read to use XC by default. Somewhere. And so that’s the one I’ve always used. I’ve never even downloaded the original one.

    • @iarigby
      link
      128 days ago

      I use camera one for github on a device outside my icloud, works great. A few websites also allowed me to add second passkeys (bitwarden in addition to icloud)

    • @rdyoung
      link
      -3
      edit-2
      28 days ago

      deleted by creator

      • @NosferatuZodd
        link
        128 days ago

        FYI there’s a bug currently that lets everyone see the comment even after they are deleted

        I use sync on android but I believe it’s a bug in the API so it should be everywhere

        Just try to reply to the comment and you’ll see it