Fido hardware Passkeys as masterkeys for Vault unlock

[Clippinister (Sir_Clippy IV.)]

Hey i was wondering for a long time if you guys could add Fido Passkeys as a masterkey option to unlock the vault (just like with KeePass). Its awesome to have Fido as a login 2FA but i would love to have that extra mesure of securtiy that a Passkey vault unlock has. Recently got my PC hacked and ordered YubiKeys to step up my game, and i want to make the best of it.

Thanks in advance!

[Nail1684]

@Clippinister Welcome to the forum!

@Clippinister

if you guys could add Fido Passkeys as a masterkey option to unlock the vault

Just to this point: both passkey login and unlock are already possible for the web vault and the Chromium-based browser extensions – see here: Log In With Passkeys | Bitwarden

(the Firefox extension, desktop apps and mobile apps are expected to follow with this… eventually)

[Clippinister (Sir_Clippy IV.)]

Allright, all i wanted to know if you guys have the other platforms on the roadmap too!

[Nail1684]

… you could have just asked for that…

Anyway, you can also follow the progress here (i.e. the two related feature requests):

Sign into Bitwarden with a passkey / "Login with passkeys" (for all BW apps)

With iOS 15.4 it appears there is support for the new “passwordless” spec that Apple, Google and Microsoft are promoting. When I try WebAuthn from Mac Safari, one of the options is “iPhone, iPad or Android Device (Use passkey from a device with a camera)”. This would be a fantastic replacement for physical Yubico keys I think. When I follow the process, it shows me a QR Code which I scan from my phone, which then leads to a popup that says that there are no passkeys for vault.bitwarden.com in m…

Unlock with passkeys / FIDO2

This feature request is to allow a flow where: User has a logged in browser extension Browser extension locks after x minutes (already possible) Unlocking can be done with Yubikey alone (no password) I would like to stress again that this is a different feature than what the recent update introduced and that the unlocking with 2FA if what post people in that thread were looking for. Small addition: this is not a fringe feature, it is central to a lot of organisations that use Lastpass.

[Nail1684]

@Clippinister

if you guys could add Fido Passkeys as a masterkey option to unlock the vault (just like with KeePass).

BTW, as far as I know, there is no FIDO passkey option to unlock the vault on KeePass. (I know from KeePassXC that there is an option to make a YubiKey part of the encryption of the vault – but that’s also not a FIDO2 passkey option)

@Clippinister

Recently got my PC hacked and ordered YubiKeys to step up my game, and i want to make the best of it.

That’s in general a good move – though I would add that there are also other hardware security keys than YubiKeys – and as good as they are, unfortunately they also don’t protect you from malware. (e.g. if you unlock your vault on an infected computer, whether per passkey or otherwise, all bets are off anyway)