Why passkeys are a step back for personal security: examining account lockout risks, platform lock-in, hardware key limits, and fragile recovery flows.
android doesn’t allow 3rd party apps to use passkeys nor autofill 2fa consistently. For passkeys, you are forced to use google services for it, or loose access, making it pointless. TOTP codes meanwhile can at least be copied and pasted manually from a password manager.
It’s android version dependent. Only 14 and up support 3rd party providers.
Passkeys are supported on devices that run Android 9 (API level 28) or higher.
On many devices, Credential Manager stores passkeys to Google Password Manager by default. Users can choose other password managers as its passkey providers in the System Settings on Android 14 or higher.
Given the slowness of android version rollouts, this will be an issue for a long time.
I also think supporting older androids is pushing apps to do it the “wrong” way and making it google specific.
14 and up seems to be about 80% of users, and I suspect there’s a correlation between people who want to use passkeys with a third party password manager and being within two major versions of current.
Some password managers can sync passkeys for you! Bitwarden can handle it
android doesn’t allow 3rd party apps to use passkeys nor autofill 2fa consistently. For passkeys, you are forced to use google services for it, or loose access, making it pointless. TOTP codes meanwhile can at least be copied and pasted manually from a password manager.
https://developer.android.com/identity/passkeys/manage-passkeys
Actually not, 3rd party Android apps can act as passkeys providers
With Bitwarden you can even do your own self hosted sync of passkeys
https://bitwarden.com/blog/bitwarden-passkeys-mobile/
Any app where it doesn’t work has chosen to not use the right API
It’s android version dependent. Only 14 and up support 3rd party providers.
Given the slowness of android version rollouts, this will be an issue for a long time.
I also think supporting older androids is pushing apps to do it the “wrong” way and making it google specific.
14 and up seems to be about 80% of users, and I suspect there’s a correlation between people who want to use passkeys with a third party password manager and being within two major versions of current.
“I can’t run Linux because version 1.0 doesn’t support my GPU”