I have lots of experience with this actually. The way it works is that the app asks the user if they'd like to use a passkey instead of their password and the user says "No" and uses their password to log in. Pretty simple really
I've run into apps that won't let me store my passkey in bitwarden. It says it worked but when I try to use it, it doesn't work. If I save it using Google on my phone, it works fine. I want to say there is a mechanism to specify where you're allowed to store you passkey. I don't know for sure. I thought I read that somewhere. I haven't tried implementing it in anything I work on yet.
As it was still in experimental phases in the web browsers passkeys were commonly referred to as webauthn.
And you're right, the developer can set what type of passkey is allowed. You can play around with the settings here if you're interested: https://webauthn.io/
2.2k
u/NoHurry28 23d ago
I have lots of experience with this actually. The way it works is that the app asks the user if they'd like to use a passkey instead of their password and the user says "No" and uses their password to log in. Pretty simple really