Passkeys with IOS18

Hi everyone,
I’m really at a loss right now.
A little while ago I secured my Bitwarden with passkeys when my iPhone was still on IOS17.
It bothered me that I had to enter a password despite the passkey. Then I read something about the PRF extension and understood that you can use the passkeys with this extension and do NOT have to enter a password afterwards. Since IOS18 should support PRF, I have now updated my iPhone.
Now the problem is that I get an error message when I try to save the passkey in my iPhone. I scan the QR code in the browser and then I get the error message “The process could not be completed. Please try again.”
I also have an iPad with IOS17, but strangely enough I get the same error when I try to use it to save the passkey.
Do you know what this could be and/or how I can fix it? Thanks for the help.

If there is already such a thread, I would be very grateful if it could be linked. Unfortunately I have not found it.

Thanks
Jan

@Jan-Lukas_Schroder Hi!

So, you are talking about this Log in with Passkeys | Bitwarden Help Center , right?

Did you try to log in to the web vault via Safari on your iPhone directly and try to store the passkey on your device?

PS: You tagged this as “app:desktop” - but the Bitwarden desktop app doesn’t come into play with what you’re trying here, or does it? (I ask, just to understand it better)

Hi,
yes i am talking about that.
I havent thought about that, but it did end up working.
Yeah, the tag “app:desktop” was wrong.

Although I have now stored the passkey for bitwarden on my phone I still have to enter my masterpassword after logging in with the passkey. (Note this happens while using Firefox)
If I try to use Chrome it prompts me to scan the qr code to log in, the pop up on my phone are showing i am identifying myself through face id but then there is an error with logging in from Bitwarden but it is not really a helpful error message “Reading Passkey… Keep this window open and follow the instructions of your browser.”

Thats all there is as an error message, no new pop ups or anything it just says “try again”.

I’m not sure if Firefox has already implemented PRF… I guess not… So that is the reason, I think.

I’m not sure if I understand you correctly here…

  1. “If I try to use Chrome” → you mean on your iPhone or on your desktop then?
  2. “… and error with logging in from Bitwarden…” → did you try to store the passkey for Bitwarden on your iOS device itself (or maybe iCloud KeyChain?) - or did you try to store that passkey in your Bitwarden vault?

I don’t exactly understand, why you get a QR code for logging in? - Because if it was on your desktop then, it maybe is easier, to create another passkey stored on your desktop then.

And, as already written, if you try to access the web vault ON your iOS device, there shouldn’t be a QR code to scan, but you should be able to just log in with the passkey on your iOS device… (though I must say, I’m not familiar with iOS itself, just Android)

BTW: You are aware, that that “login-with-passkey”-passkey for your Bitwarden account is still “Beta” and you are (still) only able to login to the Bitwarden web vault, and not to any other Bitwarden app?

@Jan-Lukas_Schroder Welcome to the forum!

I’ve changed the tag to app:web-vault, since login with passkey is currently only supported on the Web Vault app.

Ok, let me start all over again.

I am trying to access the web vault on my desktop with Firefox or Chrome, we’ll stay with Chrome, because as you said not sure if Firefox already implemented PRF.
When i try to login with passkey, there is a pop up that asks me if i want to log in with an external key or with a smartphone or tablet.
I choose smartphone or tablet as the passkey is stored on my icloud.
Then there is a qr code or whatever you wanna call it, its something i have to scan with my phone camera.
After i scan that field and my phone proves my face id there is just this error message again “Reading Passkey… Keep this window open and follow the instructions of your browser.”

So

  1. “If I try to use Chrome” → you mean on your iPhone or on your desktop then? On my Desktop
  2. “… and error with logging in from Bitwarden…” → did you try to store the passkey for Bitwarden on your iOS device itself (or maybe iCloud KeyChain?) - or did you try to store that passkey in your Bitwarden vault? I went with your instructions and opened safari and stored the passkey in the Passwords App that is now available in IOS18.

I hope this clears things up more.

And yes I am aware that “login with passkey” is still BETA and only available to the web vault.

Thanks for your help.

@Jan-Lukas_Schroder Ah, okay, I see. Thanks for the clarification!

But then, I’m at my whit’s end, as I don’t know iOS enough.

You wrote in your first post, iOS 18 should support PRF, and it seems that is true (e.g. ASAuthorizationPublicKeyCredentialPRFAssertionInput | Apple Developer Documentation). And if you can create that passkey (stored in iCloud) “with encryption” successfully, then that should mean, PRF also works “there”, right? :thinking:

For “cross-device authentication” (that is what you do with the QR code on the desktop and the passkey in your Phone/iCloud), I guess there must be “proximity” with passkeys… so is there a bluetooth connection between your desktop and iPhone? That would be my “last guess” at the moment, why it doesn’t work… :thinking: (PS: or - and I meant that by “I don’t know iOS enough”, maybe some iOS/iCloud restrictions or “specialities” or whatever, I’m not aware of)

Maybe someone else has a better idea…?!

Yes, in the Bitwarden Settings there is encryption enabled.
And there is Bluetooth between my phone and the desktop.

There could be some restrictions but I guess as Apple is member of the Fido Alliance this shouldnt be, right.
Maybe someone else can help.

Thank you so much for your effort though.
I hope I am not the only one with this problem.