Not only passkey managers but websites too. I tried to set up a passkey for PayPal but they don't let you set it up unless you're using chrome or safari
this post was submitted on 08 Apr 2024
79 points (96.5% liked)
Proton
5398 readers
154 users here now
Empowering you to choose a better internet where privacy is the default. Protect yourself online with Proton Mail, Proton VPN, Proton Calendar, Proton Drive. Proton Pass and SimpleLogin.
Proton Mail is the world's largest secure email provider. Swiss, end-to-end encrypted, private, and free.
Proton VPN is the world’s only open-source, publicly audited, unlimited and free VPN. Swiss-based, no-ads, and no-logs.
Proton Calendar is the world's first end-to-end encrypted calendar that allows you to keep your life private.
Proton Drive is a free end-to-end encrypted cloud storage that allows you to securely backup and share your files. It's open source, publicly audited, and Swiss-based.
Proton Pass Proton Pass is a free and open-source password manager which brings a higher level of security with rigorous end-to-end encryption of all data (including usernames, URLs, notes, and more) and email alias support.
SimpleLogin lets you send and receive emails anonymously via easily-generated unique email aliases.
founded 2 years ago
MODERATORS
I think this might be on Firefox, not PayPal. But I don't know enough about the situation to be sure.
Proton linked to this Firefox bug report in their article about how to set up passkey in Pass
This seems to be about android, meant just desktop, where I use Firefox and bitwarden. It works fine with GitHub where I created and use a passkey but PayPal's faq says they only support chrome and safari.
This is one of the major problems with passkeys that passwords don't have. Are they device-specific, browser-specific, browser-on-device specific? Can I use the same one or do I need a different one if I'm on chrome but two different desktops, or desktop and laptop or if I use both Firefox and Chrome on the same phone/laptop? Until this stuff gets worked out, passkey aren't going to go mainstream.
In theory, as the article mentions, you should be able to save them to your password manager of choice (if it supports passkeys, bitwarden does on the browser extension but not in the android app yet) and they will sync up through the cloud. So you might have just one passkey for GitHub for example and use that same one on all your devices to log into GitHub.
Yes, I noticed that as well. And Google account as well, would not let me register a passkey from Firefox.
Might be because Firefox support for passkeys is fairly recent.
I had no problem with FIDO2 security key and other Webauth method so far.
On brave it worked fine
Brave, a.k.a Chrome with a lion logo...
Does it make sense to sync passkeys? If you sync them they lose their benefit of proving that you have a specific device
They're not a second factor though, they're an alternative to the first factor (the password). I assume you'd still want something else for 2FA.
@lud @testeronious why the hell would someone design a spec that is dependent on hardware and impossible to port?
Interesting read. Does anyone have experience with the Bitwarden implementation of passkeys? Already on the Proton suite, but still using BW for passwords at the moment since I like the app and extension, but might switch
I have a few PassKeys in my Bitwarden Vault, and am yet to find any problems.
I don't think they're supported in mobile till the big app update iirc. On bw that is.
I’ve added a google passkey to BW last week. Was fairly easy. Just have to click the “continue” button when prompted by BW.