Big Tech passkey implementations are a trap
https://proton.me/blog/big-tech-passkeyOpen linkView original on lemmy.worldhttps://proton.me/blog/big-tech-passkeyOpen linkView original on lemmy.worldhttps://proton.me/blog/big-tech-passkeyOpen linkView original on lemmy.world
Not only passkey managers but websites too. I tried to set up a passkey for PayPal but they don't let you set it up unless you're using chrome or safari
I think this might be on Firefox, not PayPal. But I don't know enough about the situation to be sure.
Proton linked to this Firefox bug report in their article about how to set up passkey in Pass
https://bugzilla.mozilla.org/show_bug.cgi?id=1862132
This seems to be about android, meant just desktop, where I use Firefox and bitwarden. It works fine with GitHub where I created and use a passkey but PayPal's faq says they only support chrome and safari.
This is one of the major problems with passkeys that passwords don't have. Are they device-specific, browser-specific, browser-on-device specific? Can I use the same one or do I need a different one if I'm on chrome but two different desktops, or desktop and laptop or if I use both Firefox and Chrome on the same phone/laptop? Until this stuff gets worked out, passkey aren't going to go mainstream.
In theory, as the article mentions, you should be able to save them to your password manager of choice (if it supports passkeys, bitwarden does on the browser extension but not in the android app yet) and they will sync up through the cloud. So you might have just one passkey for GitHub for example and use that same one on all your devices to log into GitHub.
Yes, I noticed that as well. And Google account as well, would not let me register a passkey from Firefox.
Might be because Firefox support for passkeys is fairly recent.
I had no problem with FIDO2 security key and other Webauth method so far.
On brave it worked fine
Brave, a.k.a Chrome with a lion logo...
Does it make sense to sync passkeys? If you sync them they lose their benefit of proving that you have a specific device
They're not a second factor though, they're an alternative to the first factor (the password). I assume you'd still want something else for 2FA.
@lud @testeronious why the hell would someone design a spec that is dependent on hardware and impossible to port?
Interesting read. Does anyone have experience with the Bitwarden implementation of passkeys? Already on the Proton suite, but still using BW for passwords at the moment since I like the app and extension, but might switch
I have a few PassKeys in my Bitwarden Vault, and am yet to find any problems.
I’ve added a google passkey to BW last week. Was fairly easy. Just have to click the “continue” button when prompted by BW.
I don't think they're supported in mobile till the big app update iirc. On bw that is.