3 ms·

I just went through the dance of logging out of all my google accounts and then logging back into them. While I was doing that, I added passkeys as a security l

I just went through the dance of logging out of all my google accounts and then logging back into them. While I was doing that, I added passkeys as a security layer. Using bitwarden, it adds them in just fine. But, if you go and try to log into a Google account with Brave, it tries to use the Brave system builtin instead of the Bitwarden one. Presenting a dialog too. As an end user, I don't know if it is bitwarden, brave or google screwing this up and I can't be bothered to figure it out, so it is back to just using passwords and 2FA...

cchance 3y ago
Just add a passkey for brave too
- latchkey 3y ago
  No, I don't want to be tied to a single browser for my passkey, what happens if I want to log into a site on my phone using safari or chrome? I also don't want it tied to my apple keychain. What if I want to share my passkey with my partner?
  - cchance 3y ago
    lol it’s a passkey… why would you want 1 that can be shared and… lost you just register another one Being like “I don’t want to add another passkey” is really a semantic issue what exactly is the difference to you or adding a passkeys to an account vs copying a passkey to another device except the fact that if you can copy it/share it… it’d be far less secure with more ways to leak
    - latchkey 3y ago
      > why would you want 1 that can be shared My partner and I share a single account for XYZ service. We don't want separate accounts. > it’d be far less secure with more ways to leak There is nothing "less secure" with sharing an account credentials with my partner through bitwarden. Especially for accounts that are things like "pay my electric bill" or "online shopping".
gclawes 3y ago
For what it's worth, 1Password Passkeys works fine in this use case. I suspect it may be a subtlety in how BitWarden works.
- latchkey 3y ago
  Good to know, if it is bitwarden, then I guess I'll expect a fix in the future.
Ferret7446 3y ago
It's Brave, the browser is responsible for handling the WebAuthn (or alternatively, the Bitwarden extension for Brave, assuming that Brave exposes some API to extensions which Bitwarden has not implemented correctly)

cchance 3y ago

Just add a passkey for brave too

latchkey 3y ago
No, I don't want to be tied to a single browser for my passkey, what happens if I want to log into a site on my phone using safari or chrome? I also don't want it tied to my apple keychain. What if I want to share my passkey with my partner?
- cchance 3y ago
  lol it’s a passkey… why would you want 1 that can be shared and… lost you just register another one Being like “I don’t want to add another passkey” is really a semantic issue what exactly is the difference to you or adding a passkeys to an account vs copying a passkey to another device except the fact that if you can copy it/share it… it’d be far less secure with more ways to leak
  - latchkey 3y ago
    > why would you want 1 that can be shared My partner and I share a single account for XYZ service. We don't want separate accounts. > it’d be far less secure with more ways to leak There is nothing "less secure" with sharing an account credentials with my partner through bitwarden. Especially for accounts that are things like "pay my electric bill" or "online shopping".

gclawes 3y ago

For what it's worth, 1Password Passkeys works fine in this use case. I suspect it may be a subtlety in how BitWarden works.

latchkey 3y ago
Good to know, if it is bitwarden, then I guess I'll expect a fix in the future.

Ferret7446 3y ago

It's Brave, the browser is responsible for handling the WebAuthn (or alternatively, the Bitwarden extension for Brave, assuming that Brave exposes some API to extensions which Bitwarden has not implemented correctly)