3 ms·
My understanding is that Passkeys are transferrable, unlike earlier efforts. See for example this iOS help page: https://support.apple.com/guide/iphone/passkeys
by two_handfuls 3y ago
My understanding is that Passkeys are transferrable, unlike earlier efforts. See for example this iOS help page: https://support.apple.com/guide/iphone/passkeys-passwords-devices-iph82d6721b2/ios https://support.apple.com/guide/iphone/passkeys-passwords-de...
Unless you store the passkey in a hardware Fido key like a Yubikey. Then the way to transfer it is to physically carry the key and plug it to another device.
- d-z-m 3y agoOP specifically mentions "cross-vendor" transferable. Which, to my understanding, is currently true.
- two_handfuls 3y agoYou can set up a Yubikey on a mac and use it on a Windows machine. It’s cross-vendor transferrable.
- d-z-m 3y agoIn this case, we're using the term "cross-vendor transferable" to mean that the key material can be exported out of one vendor and imported into another. So if you could export the passkey from Windows Hello and import it into your iCloud Keychain, that would be cross-vendor transferable. Or if you could export the Resident Key out of your Yubikey and import it into Google Password Manager, that would be cross-vendor transferable.
- two_handfuls 3y agoThe horror scenario of the parent post was completely avoidable with “not cross-vendor transferrable” keys as I describe. This “cross-vendor” property is nice but it’s not required to defend against being locked out of one’s stuff.