this post was submitted on 28 Aug 2024
98 points (89.5% liked)

Cybersecurity - Memes

2188 readers
2 users here now

Only the hottest memes in Cybersecurity

founded 2 years ago
MODERATORS
 

Sadly, the support for passkeys is still lacking.

you are viewing a single comment's thread
view the rest of the comments
[–] Diplomjodler3@lemmy.world 38 points 5 months ago (9 children)

I still have no idea how passkeys work. All the explanations I've seen so far were less than helpful.

[–] synapse1278@lemmy.world 26 points 5 months ago (6 children)

As I understand it, instead of the website or online service storing your password (in a, supposedly secured way), with passkey your password manager stores a private key and the online service stores a public key (or rather a lock). The key and the lock are paired together cryptographically (mathematical functions that are non-reversible). Now when you login with passkey, the service sends a challenge generated from the lock, that can be solved only with the matching private key, your password manager solves the challenge and your authenticated. Locks and keys were not exchanged during the process, and services never store your key. Everything happens automagically.

It actually uses the same protocol used is some hardware security keys such as Yubikey and Solokeys. The problem remains the same as with hardware security keys, adoption and support, compatibility. It's very rare that a service supports these options, although they exist for a while.

Anyone feels free to correct me if I wrote something wrong. I am by no mean an expert.

[–] weissbinder@feddit.org 1 points 15 hours ago (1 children)

Is there any way to use passkeys without anything Google or Apple or smartphone?

[–] synapse1278@lemmy.world 1 points 12 hours ago (1 children)

Bitwarden has clients for Windows and Linux, and extensions for Firefox, Chrome. You can use passkeys this way. I self-host Bitwarden (vaultwarden) and this is how I use passkeys, via Android app and Firefox extension on Linux. IDK if the flatpakinux client would allow you to use passkeys.

[–] weissbinder@feddit.org 1 points 12 hours ago* (last edited 12 hours ago) (1 children)

Hm, I do host myself a vaultwarden-web instance and I don't see an option for passkeys. Time to update I guess, although it's not that old - 2024.1.2

[–] synapse1278@lemmy.world 1 points 11 hours ago

Passkey will show once you have registered one for a given website. Usually, when registering for a website that offers passkey login, it will offer you to register a passkey when creating your account, then you can unlock your vault from the bitwarden extension and register the passkey. Otherwise for an already existing account, you can go to your account/security settings for this website, if they offer passkey login, it will be in the same section as for security keys (yubikey, solokeys), the registration process is similar to registering a hardware security key, only bitwarden will act as the passkey. You can see it as a de-materialized security key.

load more comments (4 replies)
load more comments (6 replies)