3 ms·

> And Apple does the same with Safari and their password manager. No, they don't. Apple vends an API to allow third party password managers to hook into Safari

> And Apple does the same with Safari and their password manager. No, they don't. Apple vends an API to allow third party password managers to hook into Safari and other apps to save and provide passkeys. I use 1Password on Windows and iPhone to use my passkeys between Firefox, Chrome, and Safari. https://developer.apple.com/passkeys/ https://developer.apple.com/passkeys/ https://developer.apple.com/documentation/authenticationservices https://developer.apple.com/documentation/authenticationserv... Looks like Chrome on Android has flagged support for this (not enabled by default) so presumably thats coming soon as well. https://blog.1password.com/save-use-passkeys-android/ https://blog.1password.com/save-use-passkeys-android/ https://1password.community/discussion/143903/how-do-i-use-passkeys-in-google-chrome-on-android https://1password.community/discussion/143903/how-do-i-use-p...

lxgr 3y ago
The problem isn’t the lack of an API, but rather the default being to store passkeys in an unexportable format in Apple’s or Google’s password safes. Unsophisticated users are very likely to inadvertently lock themselves into their current platform with passkeys. Passwords can be copy-pasted over to a new password manager, worst case.
- Terretta 3y ago
  Apple's is also not un-exportable. I've twice exported my password database to try other password managers. Apple's built-in is now approaching the level of a full password manager rather than just keychain sets. Entries can be mapped to multiple sites/hosts, it supports TOTP, and shared sets. Even "plays well" with third party managers but I wouldn't recommend that, it gets confusing.
  - lxgr 3y ago
    > Apple's is also not un-exportable. I've twice exported my password database Well, have you tried exporting a passkey? Passwords and passkeys are not the same thing in Apple's implementation, and I don't think there is a way to export the latter by design. I think they can be shared via AirDrop these days, but that doesn't provide a migration path out of their walled garden since I think that process is mediated by Apple somehow, i.e. it's not just a JSON-encoded private key or anything like that. Unfortunately Apple have been pretty bad about updating their "Apple Platform Security" document, which is where they'd normally share such details, so I haven't been able to figure out how "passkeys over AirDrop" actually work under the hood and whether there's a path to cross-vendor migration there.
  - jmholla 3y ago
    > I've twice exported my password database to try other password managers. Have you done that on just an iPhone? Last I checked you need a Mac. So iPhone users have to by another Apple product to leave the Apple ecosystem in way that doesn't require you to unlock your password settings multiple times to transfer each password.
josephcsible 3y ago
Yes they do. If you create a passkey Apple's way, you'll be unable to ever use it from any non-Apple device or operating system.

lxgr 3y ago

The problem isn’t the lack of an API, but rather the default being to store passkeys in an unexportable format in Apple’s or Google’s password safes. Unsophisticated users are very likely to inadvertently lock themselves into their current platform with passkeys. Passwords can be copy-pasted over to a new password manager, worst case.

Terretta 3y ago
Apple's is also not un-exportable. I've twice exported my password database to try other password managers. Apple's built-in is now approaching the level of a full password manager rather than just keychain sets. Entries can be mapped to multiple sites/hosts, it supports TOTP, and shared sets. Even "plays well" with third party managers but I wouldn't recommend that, it gets confusing.
- lxgr 3y ago
  > Apple's is also not un-exportable. I've twice exported my password database Well, have you tried exporting a passkey? Passwords and passkeys are not the same thing in Apple's implementation, and I don't think there is a way to export the latter by design. I think they can be shared via AirDrop these days, but that doesn't provide a migration path out of their walled garden since I think that process is mediated by Apple somehow, i.e. it's not just a JSON-encoded private key or anything like that. Unfortunately Apple have been pretty bad about updating their "Apple Platform Security" document, which is where they'd normally share such details, so I haven't been able to figure out how "passkeys over AirDrop" actually work under the hood and whether there's a path to cross-vendor migration there.
- jmholla 3y ago
  > I've twice exported my password database to try other password managers. Have you done that on just an iPhone? Last I checked you need a Mac. So iPhone users have to by another Apple product to leave the Apple ecosystem in way that doesn't require you to unlock your password settings multiple times to transfer each password.

josephcsible 3y ago

Yes they do. If you create a passkey Apple's way, you'll be unable to ever use it from any non-Apple device or operating system.