logoalt Hacker News

blackcatsec • today at 3:28 PM • 2 replies • view on HN

Syncable passkeys are a thing which the OP addressed. Apple, Bitwarden, and other password managers all implement syncable passkeys. In fact, I just did an upgrade of my iPhone 15 Pro Max to an 18 Pro Max and all of my passkeys came along with the upgrade.


Replies

TrueDuality • today at 3:33 PM

I don't think it's appropriately addressed. The apple ecosystem has really good syncing between devices but only when they share an iCloud account. What happens when your work mac isn't permitted to use your personal account? What happens when your company issued password manager and your personal one fights? What happens when your company issued device is an Apple device AND you have to use a mandatory password manager from the company?

The problem to me is that passkeys assume the user owns the device and CAN choose to make a single store authoritative for their credentials. The only professional environments I've encountered that haven't/wouldn't hit this issue are ones small enough that they don't really have device or security governance in place which you can't use as a secure reference baseline.

edoceo • today at 4:22 PM

Can they go from the 18 Pro Max to a Windows 11 device? Or to an Android device? Genuinely curious about the portability.

➕ show 2 replies