I use Bitwarden’s passkey support myself (on the desktop, mobile doesn’t work yet unfortunately, and I also have to upgrade to an Android version for that). The first release had bugs, now everything works perfectly fine. I had been using the built-in webauthn on my phone for a while.
There will probably be edge cases and not every browser is equally clear, but I no longer have a problem with passkeys these days. I mainly read problems from people with 2FA keys that have very limited storage; that is also documented on the website, but it seems that few people realized how little a total of something like 20 keys actually is.
The biggest problem causes are the websites that crash your session several times a day and make you log in again. Depending on your login flow, this is two clicks or scanning a QR code; if my browser presented me with a QR code, I would disable that feature as well.
The biggest problem I encounter with passkeys today is still in the implementation, and especially that of websites that are completely destroyed by the smallest edge case. The API is not that unclear, but “check whether this optional feature is supported” seems too ambitious for many (including large) websites.
Tags: Google million accounts passwordless login passkeys Computer News
