Elektrine lite

← Feed

@greenpike@infosec.exchange

2026-04-28 20:52 UTC

So passkeys had a few moments in the media spotlight (in the UK) this week. I thought I'd revisit them to test them again. For those who know the technology well, is there any mechanism for handling cross-device flows where bluetooth is unavailable? I can see it's meant to help with proximity checking... but I can't see a way to make it work without bluetooth in my (limited) tests. Second, how can we make it work on a single machine with multiple browsers? e.g., Chromium and Firefox both installed, potentially with multiple profiles. A crude method is to install whichever FIDO2 authenticator/sync service on every ... single ... browser ... Better would be a cross-application flow on a single device. Anyone able to point me to means of handling those use cases? #passkeys

Replies (1)

  • @becomingwisest@hachyderm.io 2026-04-29 12:44

    @greenpike@infosec.exchange if we stick with your restrictions, and option might be something like a yubikey. They can store several passkeys for sites, and I’d expect each browser to use the same keys. This would allow you to not have the passkey stored on the computer you are using, while not requiring Bluetooth.

    Open ##3219523