4 ms·

A password manager can easily implement passkeys just like it implements passwords. Though last I checked no browser had created an API for extensions to imple

A password manager can easily implement passkeys just like it implements passwords. Though last I checked no browser had created an API for extensions to implement the passkey API. KeepassXC's implementation for example has to inject JS into every page to override `window.navigator.credentials` ( https://github.com/keepassxreboot/keepassxc-browser/pull/1786 https://github.com/keepassxreboot/keepassxc-browser/pull/178... ). It works but is brittle, so a proper way through extension API would be nice.

coder543 3y ago
I can’t speak to other platforms, but iOS natively integrates with third party password managers for passkey support, including inside Safari.
samcat116 3y ago
The 1Password extension in Chrome does this so I assume there is some API
- varjolintu 3y ago
  Every password manager browser extension does a similar injection, including 1Password.
aseipp 3y ago
It's a really recent addition to Chrome/Edge to support that, and it only was supported on iOS in v17 which came out last week. Actually, 1Password probably released their support for Passkeys last week precisely because iOS 17 was finally out. For reference, I just 5 minutes ago opened GitHub in Edge on my iOS device, clicked "Sign in with Passkey", and 1Password correctly popped up and offered to sign in with the passkey I had created in Edge on my desktop. I then opened Safari on my phone, and did the same thing. So it definitely is getting there.
- deleted 3y ago
  [deleted]
varjolintu 3y ago
I agree. An open API in browsers would simplify things a lot.
dwaite 3y ago
Android and iOS 17 have native API to supply passkeys via system API, which will surface in browsers as well as native apps. A pure web extension password/passkey manager currently has to go the injection route, and will not surface credentials in native apps. This generally means that if you use such a manager, you need to make not to select any options to remove your password, either from your password manager or from the account behind that native app.

coder543 3y ago

I can’t speak to other platforms, but iOS natively integrates with third party password managers for passkey support, including inside Safari.

samcat116 3y ago

The 1Password extension in Chrome does this so I assume there is some API

varjolintu 3y ago
Every password manager browser extension does a similar injection, including 1Password.

aseipp 3y ago

It's a really recent addition to Chrome/Edge to support that, and it only was supported on iOS in v17 which came out last week. Actually, 1Password probably released their support for Passkeys last week precisely because iOS 17 was finally out. For reference, I just 5 minutes ago opened GitHub in Edge on my iOS device, clicked "Sign in with Passkey", and 1Password correctly popped up and offered to sign in with the passkey I had created in Edge on my desktop. I then opened Safari on my phone, and did the same thing. So it definitely is getting there.

deleted 3y ago
[deleted]

varjolintu 3y ago

I agree. An open API in browsers would simplify things a lot.

dwaite 3y ago

Android and iOS 17 have native API to supply passkeys via system API, which will surface in browsers as well as native apps. A pure web extension password/passkey manager currently has to go the injection route, and will not surface credentials in native apps. This generally means that if you use such a manager, you need to make not to select any options to remove your password, either from your password manager or from the account behind that native app.