Passkeys.io – A Passkey Authentication Demo

Re:Passkeys.io – A Passkey Authentication Demo by azinman2 on Tuesday October 25, 2022 @12:00PM (#33332387)

I guess I’m not understanding passkeys. On my iPhone it’s asking generating a QR code to scan with another device. Is this assuming another device already has credentials? What if this is my only device?

[ Parent | on HN ]

Re:Passkeys.io – A Passkey Authentication Demo by LeoPanthera on Tuesday October 25, 2022 @12:05PM (#33332455)

In the specific case of Apple, your PassKey is stored in iCloud, and so can be retrieved from any Apple device you are signed into.

Without this kind of cloud sync, you need at least two devices, or you will be locked out if you lose or break one.

[ Parent | on HN ]

Re:Passkeys.io – A Passkey Authentication Demo by ezfe on Tuesday October 25, 2022 @12:05PM (#33332449)

You can also save it to your phone, you only need to scan another QR code if you want to save it on another device

[ Parent | on HN ]

Re:Passkeys.io – A Passkey Authentication Demo by azinman2 on Tuesday October 25, 2022 @12:08PM (#33332494)

I’m given a prompt to either use another device or an external key. Those are the only two choices. Or am I supposed to create via email first and that’s what I’m missing?

[ Parent | on HN ]

Re:Passkeys.io – A Passkey Authentication Demo by 58028641 on Tuesday October 25, 2022 @12:11PM (#33332546)

You have to create first.

[ Parent | on HN ]

Re:Passkeys.io – A Passkey Authentication Demo by number6 on Tuesday October 25, 2022 @12:05PM (#33332457)

Do you use fingerprints to unlock your device? The page asked me to identify via fingerprints

[ Parent | on HN ]

Re:Passkeys.io – A Passkey Authentication Demo by dwaite on Tuesday October 25, 2022 @02:27PM (#33334366)

You register a device (authenticator), which generates and registers a new public key. You show up with that again in the future, which answers a challenge by using the private key. So it's just saying "I'm the same device as you've seen in the past".

The system QR code behavior is for when your registered credential lives on another device. It sounds like you might have not registered anything yet, so you don't have any account or credentials with which to sign in.

[ Parent | on HN ]