Microsoft Confirms Password Deletion for 1B Users

Re:Microsoft Confirms Password Deletion for 1B Users by myflash13 on Tuesday December 17, 2024 @03:38PM (#42445057)

How do I backup my passkeys? I can print out a hard copy of passwords and even 2FA code generator strings, but I haven’t seen an easy way to export and import passkeys. This is a problem.

If it were as simple as printing out a list of QR codes or URL strings I would be happy, but so far no password app I know of supports this.

[ Parent | on HN ]

Re:Microsoft Confirms Password Deletion for 1B Users by justinholt on Tuesday December 17, 2024 @03:51PM (#42445194)

At the moment, export/import is not part of the "Passkey" standard. The FIDO Alliance has a draft of the Credential Exchange Protocol that would allow such actions. Allowing the trivial export of a passkey would end up defeating the cryptographic protections they offer.

https://www.bleepingcomputer.com/news/security/new-fido-prop...

[ Parent | on HN ]

Re:Microsoft Confirms Password Deletion for 1B Users by maple3142 on Wednesday December 18, 2024 @04:26AM (#42449147)

I don't understand how can it really prevents exporting passkeys if it can be implemented by open source implementations like keepass. For example, if keepass do follow the guideline of FIDO Alliance to not implement exporting, but it would still possible to make a fork of keepass that force it to dump the credentials somewhere.

[ Parent | on HN ]