News for hackers. Stuff that matters.
Re:Don't use passkeys for encrypting user data by Cyph0n on Saturday February 28, 2026 @10:30PM (#47203399)
The problem with passkeys is that they aren’t exportable (at least from Bitwarden).
Re:Don't use passkeys for encrypting user data by nerdsniper on Sunday March 01, 2026 @01:35PM (#47209398)
They are easily exportable from Apple and 1Password AFAIK. Bitwarden seems to be doing some interesting lock-in, and while I have loved them, I no longer have a commercial password manager that I trust (leaving me with only Apple's as a high-functioning, high-trust option). I'm worried about effects of private equity pressure on groups like 1Password, Bitwarden, and LastPass (I strongly recommend against LastPass these days).
Re:Don't use passkeys for encrypting user data by lxgr on Monday March 02, 2026 @06:17AM (#47216498)
Bitwarden's format is at least implicitly documented via their open-source clients, and as a sibling comment already has mentioned, their data export includes all private/secret key material.
Re:Don't use passkeys for encrypting user data by varjolintu on Sunday March 01, 2026 @11:04PM (#47213748)
Actually, if you export your vault as JSON, the passkeys are there in plain-text.