3 ms·
Cloud-based passkeys are okayish (1pass, bitwarden), as they are available on multiple devices. However not all devices play well with it, e.g. iOS and Android
by deepsun 6mo ago
Cloud-based passkeys are okayish (1pass, bitwarden), as they are available on multiple devices.
However not all devices play well with it, e.g. iOS and Android don't ask 1pass for the passkey. I also couldn't make it ask NFC for my hardware Yubikey with passkeys, but maybe I just did something wrong.
- sitting33 6mo agoPasskeys are supposed to cover two authentication factors at once (having your device + biometrics). Because your yubikey doesn't implement biometrics, it's only a single factor, and thus cannot be used as a passkey.
- palata 6mo agoWell a Yubikey can require a password/PIN. So having your device + knowing the password.
- deepsun 6mo agoYubikey can be used as passkey atorage, I do it on Linux desktop/laptop with passkeys. It requires touching it (but no biometrics). I just couldn't make Android ask my hardware device, it wants to handle passkeys by itself. It's false that passkeys cover biometrics. They cover password + OTP (aka 2FA aka MFA, although BestBuy requires OTP even after logging in with a passkey).