> The biggest remaining one is still that fingerprint locked information is not protected under the fifth amendment in the US. Is this comment more about the o

> The biggest remaining one is still that fingerprint locked information is not protected under the fifth amendment in the US. Is this comment more about the ongoing existential concern for everyone, or wondering if this is a specific concern for yourself? The Apple implementation protects with either a biometric or passcode; you should be able to still use it if you disable the biometric features of the phone. A third-party implementation might instead support requiring a PIN rather than accepting a passcode for their users with such concerns. This is very close to the existing situation with password managers. > I am also interested in seeing how phone secured passkeys will work, iOS currently forces the use of keychain, excluding users who opt for a third party password manager like bitwarden. The system implementation uses iCloud Keychain, but a password manager can ship a web extension to supplant the existing browser API with their own implementation. On Android, there is a system level API in beta that allows third party password managers to offer passwords and passkeys to native apps and browsers. > I also wonder if phones will be able to be used to login without enabling bluetooth. There are complications to supporting USB on multi-purpose devices, and unfortunately nowhere near enough NFC reader adoption for such support to be prioritized. NFC also has some UX complications. The bluetooth support is used for proximity checks; a pure network-based approach would be open to lower sophistication MITM attacks.