Can't login to Github on Android using Passkey

My phone just got Bitwarden 2023.10.0(8257) update.
To test how things work I just tried logging in to Github but it’s not working. In my BW github record I can see there’s a passkey saved. That same passkey is recorded in my github account.

However, when I try to login I get a message that no passkey available… And that message looks like it’s coming from Google’s password manager, not BitWarden.

I am using Samsung Galaxy S20FE running Android 13 with all the available updates and hotfixes.

3 Likes

Unfortunately, it seems that the mobile apps can’t do that at the moment. For now, only the browser extensions can store and “use” passkeys. Storing Passkeys | Bitwarden Help Center (“Sign in to a website using a passkey stored in Bitwarden”)

And at the bottom of this help page you can see:
image

2 Likes

That article is outdated because I most definitely see passkey on my mobile app.

“Support” needs to be clarified because it can mean a number of different things.

Yes, you can see them on mobile, but don’t use them at the moment. The article is not outdated on this issue.

PS: Just for comparison, here the exact words for the browser extension:

2 Likes

Strange as when I visit my Google account page and test it does it tell me I’m set up and it’s working after it scans my fingerprint, yet when I try to go to other google pages do I get the “No passkeys available” message like the OP?

@Ferd, You can setup/use passkeys on Android, but at this point, when you do, it’s saving them to your phone or maybe your Google Account, but not Bitwarden.

2 Likes

This is also a confusing thing(not BW’s fault), it’s not clear if those passkeys are saved on my phone somewhere or in my Google Account.

Yes, Knowing where your passkey is saving/coming from is not always clear on most devices. For example, I don’t always know if it’s interacting with Windows Hello or a hardware key (though I’m learning to identify the nuanced differences amid the almost identical interface.)

I’m interested to see what/how much Bitwarden can do on Mobile Since I don’t know if Google will make it hard or easy to use an alternate passkey manager from their own.

its saved in your google account. So if you logout of your google account from that device , you won’t be able use passkey saved in it.

Android has included passkeys since its 9.0 version (Lollipop), but initially, only Google Credential Manager could manage them. It wasn’t until the recent Android version 14 that the system started allowing third-party credential managers, like Bitwarden, to handle passkeys. However, as this is a recent development, it hasn’t been implemented yet. Additionally, given that less than 1% of devices are using Android 14 at the time of this response, there’s no immediate need to rush this implementation. Furthermore, it’s unlikely that passkey support will be integrated into the current version of Bitwarden Mobile, which is built using Xamarin. However, there’s ongoing development for a transition to MAUI, as indicated by a branch in the mobile repository named feature/maui-migration-passkeys.

3 Likes

it displays the google password manager icon

Yes. What you’re seeing is for the passkey saved in your google password manager on the android phone.

Your answer contradicts somebody else’s answer earlier… :face_with_diagonal_mouth:

Not sure. In the topmost image, that multicolored key indicates it’s from the Google password manager. I have several passkeys on my phone and that’s what it looks like, unless I’m mistaken.

:person_facepalming:I know it’s Google’s Password Manager. That’s not what I was asking.
You said it’s part of the android phone while somebody else said it’s part of the Google account.
They are 2 separate and very different things.

I’m not a hundred percent sure - and to be honest hadn’t the nerve to test it out myself - but I belive, it’s the device, i.e. the android phone. When you watch your own screenshot in your first post: it literally says “There aren’t any passkeys for github.com on this device”.

It is saved in the Google password manager on the phone, as I had said. Or at least that’s what I tried to convey.

So does that mean if I sign out from my Google account on this phone and sign in with a different one, all those same passkeys will still be accessible?

I would think so (assuming you mean the phone/device passkeys when you wrote “those same passkeys”). But sounds like a good test you can report on later here. :sweat_smile:

PS: Hm, the longer I think about your question, the more unclear it becomes to me. Do you mean by “sign in with a different one” a) same phone but different Google account or b) different phone but same Google account? - I thought of a) in my answer… and then I would reckon, that all your passkeys on your phone should still work (the other websites didn’t change), except the Google-account-passkey (“wrong” Google account for the “other” Google passkey on your device)…

Good question. I am pretty sure the passwords and passkeys are tied to a single account but I am not sure. I only have one Google account. Maybe someone else can chime in.