4 ms·
Passkeys on iOS and macOS actually work quite well in that regard. They get stored in your provider of choice across the web, web views, apps etc., at least in
by lxgr 8mo ago
Passkeys on iOS and macOS actually work quite well in that regard. They get stored in your provider of choice across the web, web views, apps etc., at least in my experience.
Mine is Bitwarden, and that's available on pretty much all platforms, natively where available (except on macOS currently), as a browser extension otherwise.
For the rare instance in which I need to authenticate using a passkey on a computer where I'm not logged into Bitwarden, there's the cross-device CaBLE flow where I can scan a QR code with my phone and use Bitwarden to authenticate. This works across OSes and browsers.
- javier2 8mo agoexcept... i store my password for work in bitwarden, so I dont want to also keep my work passkeys in the same place. For my personal stuff, that is a risk I can live with so far, but for work it seems dumb.
- lxgr 8mo agoYeah, definitely don’t mix work and personal credentials. But many password managers allow using different accounts/vaults on one machine.
- ezfe 8mo agoYour Bitwarden should enforce the necessary 2-Factor auth for this scenario, but if you’re worried just make sure to be careful when registering that single passkey.
- freeopinion 8mo ago> This works across OSes and browsers. It doesn't work for me in Firefox on Linux. I'm very curious to know how it works for you.
- lxgr 8mo agoDoes their Firefox extension not inject its own WebAuthN implementation into every visited site on Linux? It does for me on macOS (i.e. it overrides the OS/browser-provided one).
- tredre3 8mo agoIs this really how password managers extensions work? They inject arbitrary javascript in every page you visit? I would have naively thought that there'd be a better and safer API for it, considering that all browsers already have the infrastructure in place to handle login autocomplete.
- varjolintu 8mo agoYes. This is mandatory for all browser extensions. There's no API behind a separate permission, even if would be the best way to handle this.
- bpye 8mo agoAs someone that uses a YubiKey for WebAuthN - I really wish Bitwarden didn't do this. I know I can turn it off, but it's a bad default.
- Cyph0n 8mo agoThe problem with passkeys is that they aren’t exportable (at least from Bitwarden).
- nerdsniper 8mo agoThey are easily exportable from Apple and 1Password AFAIK. Bitwarden seems to be doing some interesting lock-in, and while I have loved them, I no longer have a commercial password manager that I trust (leaving me with only Apple's as a high-functioning, high-trust option). I'm worried about effects of private equity pressure on groups like 1Password, Bitwarden, and LastPass (I strongly recommend against LastPass these days).
- lxgr 8mo agoBitwarden's format is at least implicitly documented via their open-source clients, and as a sibling comment already has mentioned, their data export includes all private/secret key material.
- deleted 8mo ago[deleted]
- varjolintu 8mo agoActually, if you export your vault as JSON, the passkeys are there in plain-text.