Bringing passkeys to Android and Chrome

#1

Post by Heavywater » Wed, Oct 12, 2022, 3:20 PM UTC

Bringing passkeys to Android and Chrome
android-developers.googleblog.com

Re: Bringing passkeys to Android and Chrome

#2

Post by colordrops » Wed, Oct 12, 2022, 3:42 PM UTC

Ugh, I hope they don't make it difficult to use third party password managers. I'm pretty happy with vault warden.

Re: Bringing passkeys to Android and Chrome

#3

Post by selykg » Wed, Oct 12, 2022, 3:45 PM UTC

colordrops wrote: post #2

Ugh, I hope they don't make it difficult to use third party password managers. I'm pretty happy with vault warden.

Pretty sure there's been talk on the Bitwarden community forums about them adopting support for using it as a provider. I assume once that's available you might start to see it move into Vaultwarden. But, that's sort of the risk you run with using a 3rd party to a 3rd party...

Re: Bringing passkeys to Android and Chrome

#4

Post by madjam002 » Wed, Oct 12, 2022, 3:47 PM UTC

See also https://security.googleblog.com/2022/10/SecurityofPasskeysin... which provides a more technical overview

Re: Bringing passkeys to Android and Chrome

#5

Post by LibertyBeta » Wed, Oct 12, 2022, 3:50 PM UTC

Interesting. I'm still struggling to see how this is better than just using a yubi/solo-key

Re: Bringing passkeys to Android and Chrome

#6

Post by eli » Wed, Oct 12, 2022, 3:51 PM UTC

LibertyBeta wrote: post #5

Interesting. I'm still struggling to see how this is better than just using a yubi/solo-key

More people own an Android phone than a yubikey?

Re: Bringing passkeys to Android and Chrome

#7

Post by jasonjayr » Wed, Oct 12, 2022, 3:51 PM UTC

And what happens if your Google account that these keys are tied to is locked/revoked for a nebulous ToS violation?

Re: Bringing passkeys to Android and Chrome

#8

Post by jrm4 » Wed, Oct 12, 2022, 3:51 PM UTC

Nah.

For all the talk of "one app to rule them all" (which is an awful idea) this is a step closer to that.

For all it's faults, crypto has one thing right -- not your keys, not your stuff. I get that doing keys/passwords is hard, but the best thing in the long run is for them to stay in the hands of the user.

And if not, the holder of the keys needs to be someone you can easily hold accountable, i.e. either fire, or arrest, or sue if they get it wrong.

Re: Bringing passkeys to Android and Chrome

#9

Post by jrm4 » Wed, Oct 12, 2022, 3:52 PM UTC

LibertyBeta wrote: post #5

Interesting. I'm still struggling to see how this is better than just using a yubi/solo-key

More convenient, but less safe for everyone in the long run.

Re: Bringing passkeys to Android and Chrome

#10

Post by greatgib » Wed, Oct 12, 2022, 3:52 PM UTC

Another product that they will use their dominant position to force down our throat!