What are your thoughts on passkey login?
What are your thoughts on passkey login?
A lot of services support passkeys. Microsoft even has an option to make my account "passwordless". Since they are more secure than passwords, will you be switching some / most of your accounts to passkeys any time soon? Interested to hear everyone's thoughts on passkeys. 🔑
You're viewing a single thread.
@bilbobaggins The good part: my self-hosted VaultWarden supports passkeys, so I've added them to everything I can. The bad part: Android does not support third-party passkeys on Android 13 and lower, and guess whose phone is stuck with 13 being the latest official release for his smartphone - that means that the websites that completely substitute the password with a passkey, such as PlayStation and Microsoft, are currently off-limits for me because I'll end up locked outside.
Yeah, I noticed incomplete support as well even though I do have Android 14. I opened an incognito tab on my phone to log in to Google with my passkey and it kept asking for my device fingerprint. Not the passkey I saved in Bitwarden. It still logged me in but it wasn't quite right. Feels like Android really wants me to use Google's passkey manager 😓 hopefully this all changes in the future
Have not tried passkeys on mobile, so wonder how it is on Graphene and other degoogled OSes...
With Bitwarden, you can use passkeys on chromium browsers. Vanadium actually enabled support in advance.
You need to have Play Services installed, though. This is due to Chromium, nothing GOS can do about that. No need for even network permission for Play Services, luckily.
Firefox is supposedly adding a standalone implemetation, which won't require Play Services, any year now...
Don't have Proton Pass, so don't know what's the situation there. With BW+Vanadium, they work well. I just wish Play Services weren't required. With Google Passwords they probably just work.
Ah, thanks! I don't use passkeys myself yet, and I guess would be waiting longer - really don't want Play Services in any form)
Mostly wondering for KeepassXC, as the managers you mentioned are cloud.
They are convenient, but there's only a couple sites that support full login with passkeys. I'm reading between the lines of your comments none of them are sites you'd use (Microsoft, Github, Google, etc...)
Someone else commented KeepassXC has an open issue about passkeys, perhaps they'll add support sometimes too.
You're not really missing anything yet, to be honest. I've mostly tried them out just out of interest, and it's still very much aimed at people using Google or Apple...