Once 1Password supports proper single export when I make a new passkey I'll store it there and later export it to Apple.
Meanwhile I simply make two passkeys. I've only run into I think two sites that supported passkeys but would not let me make two.
On most sites making a second passkey is as simply as going to your security settings, finding the passkey settings there, hitting the "add another passkey" link, and pointing your phone at the QR code it shows, and then on those phone choosing the password manager that you did not use for the first passkey.
How do I log in to my account if I don't have the specific device the account exists on?
I moved all of them from my iphone to a selfhosted bitwarden in two minutes.
I'm surprised selfhosted services would be allowed in that list. Isn't there the "risk" that you can then extract the raw key from your selfhosted instance?
https://bitwarden.com/resources/passkeys-are-phishing-resist...
it's one password to everything
Passkeys are never reused. Even for the same person, they are always unique across websites, and across devices.
and I can't use this on any other device by default. My passkey is locked within the browser used to set it up.
All password managers support passkeys.
Both apple and google allow exporting your existing passkeys to third party password managers too.
Also each website gets it's own unique public key with passkeys. It isn't a single credential
You're literally arguing a strawman
By single credential, all the passkeys on this browser use my windows user password which is effectively a single key.
Passkeys lock into a specific device and seem easy until you need to use another device.
But instead of being a credential you own and control, across what could even be a local password manager, it's one password to everything. Maybe it is more secure than a regular password in some cases but it largely seems like a worse fix than existing tools for a problem that has better solutions.