5 ms·
Hardware-bound passkeys have always been copyable by the proprietary vendor. Make a passkey on your Mac, it appears on your iPhone. Make a passkey on your And
by gcr 2y ago
Hardware-bound passkeys have always been copyable by the proprietary vendor.
Make a passkey on your Mac, it appears on your iPhone.
Make a passkey on your Android, it appears on your other Androids.
Anyone who can bind a new iPhone or Android to your Apple/Google account wins your passkeys. I think the only passkeys properly tied to hardware are dedicated FIDO devices.
- yencabulator 2y agoBy definition, if it can be copied out it wasn't hardware-bound. Yubikeys are tamper-proof and cannot be copied. Everything else is just a place to store a statement that your cloud vendor of choice blesses this gadget to authenticate your account.