@KiwiAnts you could check out using your phone as an authenticator and always using a hybrid flow. I’m not sure how reliable that is though.
I only upgraded a Windows 10 system to a Windows 11 two months ago. Before that, I was using Windows hello (then on Windows 10) as a “Passkey” 2FA for Bitwarden (and others); I can confirm that you could use it.
Side discussion: The Yubico link that Micah provided has a demo (appearing to be from a Mac) that allows registering an SDC (device-bound) passkey by selecting “Security key,” which actually displays a QR code (this doesn’t happen on my Windows 11). This seems like native support (without an additional app), but perhaps with a proper version of Android (I suspect 15+) and maybe with an HSM (as you suspect). I have neither, so I suppose I’ll have to wait and see as well. OTH, maybe this cross-device SDC (device-bound) passkey registration is still only available on Mac but not Windows.
@Neuron5569 - I will have to investigate this, but I have a feeling that while I am on Windows 10, my options have been exhausted with what I currently have available. I am only on Android 12 as well, on my phone, so I know I have limitations there also since I am not on Android 14 which more fully supports Passkeys.
@Micah_Edelblut - thanks for this info, I will check it out and see if this is doable for me.
@Micah_Edelblut - checked this out and since I am on Android 12, this is not a viable option, as I suspected. I do have plans to upgrade my phone in the coming year, which would alleviate this issue. I am also on the hunt for ways to get to Windows 11 on my current device, so eventually I will get there ….. ![]()
Just FYI, even with Android 14 some devices don’t support third-party passkey providers (I suffered from this myself - my FP5 did not use the new “credential manager” on Android 14):
As far as I know, only with Android 15 (and above) it is mandatory to use the credential manager…
Good hunting!
