Security vendors join forces to make passkeys more portable for everyone | Bitwarden Blog
bitwarden.com
FIDO Alliance publishes industry standards for consumers to easily and securely transfer passkeys across platforms and password managers.

Looks like a huge amount of security vendors are working to have a secure and open standard for passkey portability between platforms.

It is always good to see major collaboration in the security space like this considering the harsh opinions that users of some of these vendors have toward many of the others. I just wish apps and sites would stop making me login with username and password if passkeys are meant to replace that lol.

  • unskilled5117@feddit.orgEnglish
    56·
    9 months ago

    Seems like people in the comments are misunderstaning the point entirely. This protocol is about import and export from password managers and not about having them synced between devices. It would prevent a lock in effect. This is a great development!

    FIDO Alliance’s draft specifications – Credential Exchange Protocol (CXP) and Credential Exchange Format (CXF) – define a standard format for transferring credentials in a credential manager including passwords, passkeys and more to another provider in a manner that ensures transfer are not made in the clear and are secure by default.

    • Petter1@lemm.ee
      2·
      9 months ago

      Lock in effect of passkeys is just infuriating 😂good to see progress!

        • Petter1@lemm.ee
          3·
          9 months ago

          Well, nothing is stopping you to keep passkeys only in one place, why force others to do what you like? Now we have options and less friction to switch to a competitor. Which results in more competition and that results in better products. Well theoretically…

            • Petter1@lemm.ee
              0·
              9 months ago

              So microsoft does not require that you backup your passkeys? I thought that was the norm in all OS 😅

              I think that passkeys are backed up in cloud by default isn’t that bad for the average person, since they are likely not understanding passkeys (at least right now) and don’t get that they loose access to accounts, if they disable oldscool Passwords only use one passkey on one device for that account.