News for hackers. Stuff that matters.
Re:Understanding Passkeys by QhwyF3AxE on Friday May 19, 2023 @02:54PM (#36005543)
> I can't print out my passkeys and store them in a safe, nor does there appear to be any system for allowing someone access to my passkeys.

Recovery is handled differently depending on who you are using to sync your passkeys. Apple has a great recovery story. iCloud Keychain supports both a "recovery key" and "recovery contacts".

See the section titled "Recovery security" in the "About the security of passkeys" doc: https://support.apple.com/en-us/HT213305

Additional relevant docs:

Recovery contact: https://support.apple.com/en-us/HT212513

Recovery key: https://support.apple.com/en-us/HT208072

Re:Understanding Passkeys by secabeen on Wednesday May 31, 2023 @07:27PM (#36145849)
This looks good, but it's not clear that it would actually work in this scenario. The "Recovery Security" section of the first document is good, but it requires knowledge of some combination of the phone password, an "iCloud security code", possession of the SMS number for the user, etc.

The latter two links are good, but both only refer to recovering access to an iCloud account, they don't talk about further access to escrowed iCloud keychains.