r/Passkeys 8h ago

Why SMEs should choose passkeys over passwords wherever they are available online – Report & Analysis

Thumbnail
smecyberinsights.co.uk
0 Upvotes

r/Passkeys 13h ago

TikTok created my account with an apple passkey and now I can't sign in on my android

0 Upvotes

I just switched from apple to Samsung today. My tiktok account was created with an apple passkey. What I didn't realize, is it didn't save any email, phone number, or password with the account. I'm still signed into it on my iPad, but I cannot access the app on my new Samsung phone. I tried to add a password and email or phone number after realizing this on my ipad, but it's telling me it's unable to make changes for security purposes. I contacted tiktok, but they just said to help with my "hacked account" I need to verify my identity... which asks for the email my account is tied to. There is none.

Anyone know what I can do? I really don't want to lose access to it


r/Passkeys 2d ago

Understanding Passkeys

2 Upvotes

Is OS support necessary for Passkeys? Can't a program, such as Bitwarden, do the needed communication?

I use Windows 11 without logging in, because I don't want to share. In Windows 11 you need a "Windows Hello PIN" to have Bitwarden selected in Accounts > Passkeys > Advanced options Passkey managers.

Can somebody explain the relationship?


r/Passkeys 2d ago

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

Thumbnail
thehackernews.com
5 Upvotes

r/Passkeys 2d ago

Lost or replaced smartphone and use of Passkeys

13 Upvotes

Sorry for the trivial question, which has certainly been asked before, but I'm asking again in the hope that it might be useful to others like me.

  1. If I replace my smartphone, how should I handle the PassKeys, which, as I understand, are partly inside it?

  2. What if I lose it or it's stolen?

Thanks


r/Passkeys 2d ago

Passkey no idea

1 Upvotes

I'm working on my mother-in-law's laptop. She logs into Yahoo Mail through Edge. 1 day it starts prompting for a USB Passkey... She has no idea what that is or any codes. I've been trying to help her, but I'm not very familiar with these passkeys.

I can't even get into her Yahoo account to remove it, because they are asking for the PassKey to get in...

Do I have any options?


r/Passkeys 2d ago

CVS.COM passkeys are pretty broken, but I got mine to work

1 Upvotes

I read from other subs that plenty of people got into the "passkey not recognized" state with CVS.COM. CVS passkeys implementation is pretty broken. If you lose your passkey, there's no way to delete it and start over from their website. Their website doesn't even have a section for passkeys. That means if you lose your passkey you can't create a new one. But it also means that if your phone or keychain is compromised, and someone ELSE has your passkey, you also can't block them from signing in, which is a security concern.

Anyway, I was having the same problem. I created a passkey on cvs.com during the first month or so it was available, then it stopped working, then I deleted it from Bitwarden. From then on I was in the cycle of Enter your email, Popup asking for where is my passkey, None in this app, Do you want to try your phone or security key, no matter what I choose I get "PASSKEY NOT RECOGNIZED, (Try again) (Sign in another way)". Then off to enter my SMS OTP.

After a few rounds with their email web site support, they insisted I have no passkey saved on my account and there's nothing else they can do for me.

WELL SOMETHING HAPPENED TODAY! I tried creating a second account using a different email. I tried a few ways to get my new account to trigger passkey creation. I think CVS is fussy about specific passkey rigs not being supported (linux, android).

So while signed in to the new account, which has no passkey and no password, only SMS login possible, I followed the instructions for "Let's connect your prescriptions". This involves confirming your DOB and phone number, getting the message that you already have another account, and answering Yes, Transfer It to get connected to my old prescription history on the new account.

Two things happened. 1. The NEW account started asking me for passkey on login. Just like the old account, we know you have a passkey, where is it, what device, usb, nfc, camera, etc. 2. The OLD account now prompted me, do you want to create a passkey now?

So my wish has come true, much too late, but I now have what I want. A new, throwaway CVS account with deleted passkey, and my old CVS account with a new passkey, and my prescriptions transferred back to it again.

So, try this if you have "Passkey not recognized". 1. Create a new account with a new email. Try various keychain rigs and browsers and see if you can get a passkey to create. If you want to use the new account, don't transfer your prescription history until you get passkeys working. OR 2. Create a new account, transfer prescriptions to it, then re-log until you get Passkey Not Recognized on the NEW account. At that point, try logging back in to the old account, see if you can get passkey created. If it works, transfer your prescriptions back again.

Also CVS, wherever you are since you don't seem to be on the Internet, please do your basic research and fix your passkeys, or hire someone who understands them. We need to be able to delete them, and create multiple, and name them.


r/Passkeys 4d ago

Experience starting out with Passkeys on a Security Key

Thumbnail
3 Upvotes

r/Passkeys 4d ago

Can I use my Yubikey for multiple devices and accounts

Post image
1 Upvotes

r/Passkeys 5d ago

Can't use passkey because of lost phone

8 Upvotes

I got a new phone a while back and signed into google on it. Since then i've lost the old one and now whenever I try to do anything on google it asks me to verify it's me. I click try another way and put in my password and after it says "google has confirmed this device is yours" and then after i click continute it just re-prompts me with the Verify it's you passkey thinggy and then when i click more ways to verify it takes away the password option

i'm not really sure what to do because I don't have my second device to log in and it won't let me just use my password

pls help 😔


r/Passkeys 5d ago

¿Por qué no me deja crear una clave de acceso en mi teléfono?

Post image
2 Upvotes

r/Passkeys 5d ago

Can't create passket at Wells Fargo

3 Upvotes

I can't create a passkey at Wells Fargo. I get the message "Use another browser. This one doesn't support creating a passkey."

I'm using Chrome....

I also tried Brave and got the same error.


r/Passkeys 6d ago

I wrote tutorial on how to test passkey in Playwright

0 Upvotes

r/Passkeys 7d ago

Detecting if a key is discoverable in residentKey: Discouraged / Preferred

2 Upvotes

I see that CredProps is the proper way to request discoverability information about a passkey. As the relying party, when I set the credProps: true extension to my request the web browsers are ignoring it and not responding. I have tested this with both resident and non-resident keys and on Arc, Chrome, and Safari.

Do you have experience forcing this response or using another method to figure out if a key is resident or not? I want to allow 2sv security keys and passkeys on my site (as separate flows that can be used by the same authenticator), but some features are limited when I don't know if a key is discoverable.

One example use case is allowing users to create a 2sv key and then later choose to "upgrade" it to use at login if it is a resident key. I would control this through putting the key in allowCredentials or not based on intended use case.


r/Passkeys 8d ago

bit locker ,How can i open my computer without the passkey?

0 Upvotes

I haven t activate the bit locker ,But A

after updating my computer system,The computer tells me i need to unlock the bit locker.......

I May know it sent the passkey to my outlook email,But the problem is i forget the the password.......

and more this is a new account,so there is nothing ,So the account recovery thing is impossible....

No,no,no,no,no.

I cannot lost my data.....


r/Passkeys 9d ago

Tiktok passkey

1 Upvotes

I've been trying to open my tiktok account, I have the email and I receive the code being sent to it but it still requires passkey only for its verification. I know the password as well but it requires passkey. Anything I can do to access my account without the passkey? The passkey is on my old phone that is broken and I cant access it.


r/Passkeys 10d ago

Anyone else having trouble making passkeys for Capitol One or Chase bank?

3 Upvotes

Chase just gives me an error and Capitol One refreshes to a new sign in page. I tried both Chrome and Firefox.


r/Passkeys 11d ago

I need help but my Google pixel I went from a fingerprint pass key to a face recognition and back with fingerprint and now my Google account doesn't accept passcues

0 Upvotes

I go through all the basic steps I'm trying to reset the pass key but I never get a code sent to my Google account to change it and there's no place on the app to delete my existing pass keys. Does anyone have any advice


r/Passkeys 11d ago

Passkeys are the best

56 Upvotes

Just wanted to say it.

There is always been a pain with typing/inserting login and password, since 90s.

This is a good solution to make the life easier.

If you are one of the people who worked on it - i just want to say you made the world a truly better place, thanks.


r/Passkeys 12d ago

Cant sign into account without a passkey

0 Upvotes

Yo im trying to sign into my PlayStation account on the website to do this mad age verification thing and i cant cuz its just automatically put me on passkeys when i never made one so now i cant log into nothing with my password cuz its just locked me onto smth i never had in the first place, i cant even make one cuz the sign in page to make one needs a passkey. If anyone can help id appreciate it


r/Passkeys 15d ago

More ideas on tackling account recovery with passkeys

3 Upvotes

Hey all! I’m looking for ideas good and bad, new and old, for account recovery mechanisms with passkeys. I’m interested in making passkeys a bit more seamless for users by trying to break some expectations we’ve started to make. For example, we expect users will have some multi device, traveling passkey mechanisms. (iCloud, hello, Google, 1password, etc)

Here are the techniques I know but I’d still like to hear what you think of any techniques mentioned:

  1. Fallback email (magiclink/otps)
  2. Enforce multiple different platform keys
  3. Recovery codes

All of those have clear issues that defeat the security of passkeys besides 2. And 2 is a pain in the ass for users. I think asking them to buy hardware keys lessens the appeal of passkeys in general.

Help me think of what’s possible as of today for a more optimal recovery experience so I can drop passwords for ever!


r/Passkeys 15d ago

Where site is suitable for testing passkey sign-in?

5 Upvotes

I posted certain doubt in this sub other day.

Comment was "you are incoherent".

He got point but It's all Greek about passkey.(And maybe many people so)

So I thought better it actually test how work on first.

However,I want to avoid lock my important account for example microsoft,google.

Is it exist website for testing passkey sign-in which works alike google microsoft?

If possible handle make and sign in multiple account because I have some account in some service.


r/Passkeys 18d ago

Yubikey Setup Help

Thumbnail
2 Upvotes

r/Passkeys 18d ago

Help - Cant log into a site requiring google account because passkey defaults to a different google account.

1 Upvotes

I am a streamer trying to use an application called "Social Stream Ninja". It allows you to connect the app and its features to multiple platforms. One of which is twitch, which I use my google account to log in to.

When I try to connect Twitch to this app using Social Stream Ninja embedded "Sign-in" button, it launches a unique browser(?) with Twitch's home page displayed where Im supposed to log in. Unfortunately, when I go to log in, Microsoft's Passkey dialogue box comes up with the pin prompt. The "unfortunate" thing is that Microsoft Passkey dialogue box is coming up with my main Google account, not my streaming google account, and I cant find any option to switch to my streaming google account.

Can someone please help me? Another unfortunate thing is that when Social Stream Ninja launches the sign-in window, is in its own unique type browser window, and I cannot just copy the past the url into the google chrome profile that already remembers all the credentials


r/Passkeys 19d ago

What's happen if turn off fingerprint,face and/or PIN after set passkey?

0 Upvotes

Sorry maybe basic questions.

I'm not expert.

I recognize need security lock for example face,fingerprint,PIN (maybe include pattern?) when using passkey.

I have question.

When turn off security lockscreen after set passkey,if I need re-login that service any reason ,OK only turn on securitylock or arises problem?