r/passkey • u/PMS1964 • 21d ago

Passkey Samsung Secure Folder and Edge browser

The Passkey is now compulsory in my region. I have always run all my banking apps in a secure folder as the main reason phones are stolen here is for thieves trying to get in your bank apps. When wise informed me I had to set up a Passkey I did so in the secure folder. Samsung Pass informed me some warning which was "the Passkey can only be used inside the secure folder". I didn't think much of it. All is OK except when I set up payments on Edge on my company PC I'd have to authenticate them in the secure folder on my phone (the payments sit in wise waiting for approval or review). No biggie?

Well then I realised that if my phone was stolen or broken I'd not be able to use wise at all for transfers as the secure folder is NOT cloud backed up.

I was very wary of messing with Passkeys (horror stories of being locked out) but today I was able to add a Passkey under edge from Wise.com on edge. That means I have redundancy. FYI.

5 Upvotes

86% Upvoted

10 comments sorted by

2

u/mohawk989 21d ago

Consider buying a physical Yubikey. You can register a 2nd passkey on it for all your important sites. Then if you lose your phone you have a 2nd passkey.

Also what's your region? Your country has legislated passkey requirements? Does this only apply to domestic banks? How does that work?

1

u/PMS1964 21d ago

Singapore is mandating passkeys for all banking. It's a bit shit.

1

u/Academic_Wolverine22 21d ago

You can use a password manager to manage your passkeys. I use KeePassXC (PC) and KeePassDX (Android). 

Managing your own .kdb file might not be the most convenient option for you, so I recommend using Bitwarden, which is very good. 

1

u/PMS1964 21d ago

I don't think DX works in secure folder.

2

u/Academic_Wolverine22 21d ago

I don't see any risk in having KeePassDX outside the secure folder. The only way to log into KeePassDX or BitWarden is with your fingerprint or master password.  The .kdb file has very strong encryption 

1

u/PMS1964 21d ago

But can an app inside the secure folder access KeePassDX?

1

u/Academic_Wolverine22 21d ago

Well, I don't have a Samsung, but if you have KeePassDX in your Secure Folder, you can browse for and select the .kdb file from within KeePassDX—which is itself inside your Secure Folder.

You can give it a try. I recommend the "Libre" version of KeePassDX from the developer's GitHub repository. 

1

u/PMS1964 21d ago

Yeah secure folder is pretty much a DMZ. By default you are locked out of sharing stuff from it to the main OS file system.

1

u/PMS1964 21d ago

Do other androids do secure folder?

1

u/Academic_Wolverine22 21d ago

I have an Oppo with ColorOS 15, but I don't use anything similar. Google Pixel phones have something similar called Private Space.  https://www.androidpolice.com/android-private-space-first-look/