Passkeys are an Open Standard.

https://fidoalliance.org/apple-google-and-microsoft-commit-t...

> In collaboration with Google, Microsoft and other industry players, Apple has been working on a new logon technology for web and other remote services called ‘passkeys’.

I don't think it will be Apple only. However, I am wondering what will happen to services like bitwarden [1] if it is available on other OSes as well.

[1] https://bitwarden.com/

What's your concern regarding Bitwarden?

Not the original poster, but I think the worry is that how can a password manager survive in a passwordless future.

Will major players be too powerful that no competing solutions will realistically exist.

That's exactly my concern. I am the OP you refer to. BitWarden is a great product and an open source one at that.

I suppose that passwords will always be a thing for the paranoids amongst us. But i don't know whether that is enough to sustain the product.

You still need to have a wallet to store all your passkeys.

I’d rather use bitwarden than Apples wallet.

> So are you locked in with Apple if you use this, or can you switch all your existing passwords to another "passkey provider/service" ?

Eventually, yes. Not now, but the goal is eventually, yes. It requires support to come to Android and at that point, they'll build the bridge to bring them together. I don't think the system currently exists for this, but they've said Passkeys will be a "multi-year industry-wide transition" so I'm inclined to believe it'll ship in the coming years.

When you sign in with a passkey, you have the option of scanning a QR code from a locally present device running any software that can speak the standard (e.g., Android). This means that you can login using any software that supports Passkeys using any devices that support Passkeys. For example, Chrome on Windows (chrome://flags, turn on passkey support) with an iPhone is a valid pair.

Passkey's (and webauth2's) major value proposition for software/service providers is for people to stop sharing accounts. This will result in more sales/subscriptions, and better tracking of preferences/activity.

That it also happens to provide better security is just more cheese on the trap.

If they don’t allow a way to extract the private key from the wallet, do you really own that account?

I wouldn’t touch it with a 10 yard stick unless I have full control of the private key.

curious too as someone that uses 7 computers running 3 OSes, are my passkeys accessable, syncable, across OSes?

One obvious solution is to use a cross-platform password manager that supports Passkeys [1].

[1]: https://blog.1password.com/1password-is-joining-the-fido-all...

This is based on a standard that Apple, Google and Microsoft have all agree to and have agreed to a method to transfer keys between devices.

three US Corporations will be in charge of the implementation of this newly required security ?

Considering that the three control all of the popular operating systems for computers and devices, and most popular browsers who else would it be? It’s an open standards.

Assumedly any service that implements this will let you reset your password away from Passkeys, but it's still the soft lockin of "Ughhhh I don't want to reset everything".

Sites will never go full Passkeys because that obviously falls over if you want to access it from any other device or computer, support request costs would go through the ceiling

I wouldn’t be surprised if banks go passkeys only.

By 2040.