Passkeys' Caveats

Back to home_

Passkeys are unique to domains (Relying Party ID)

Public key is only available during generation

Passkeys in iCloud are by default backed up.

Requests can force specific authenticators.

Webauthn exports the public key in DER format.

Passkeys don’t support other keys other than p-256.

Passkeys can be created from the dev tools pane.

Passkeys calls are error-prone, based on user input.

Passkeys’s properties rawId and id aren’t consistent.

It is not possible to see what Passkeys a user has.

It is unclear which property is displayed.

Passkeys can always be rejected.

Passkeys will not work in localhost.

Back to home_

By 0xjjpa.

MIT License'd code available in GitHub.

Last updated - Sun Oct 08 2023