Passkeys

Eirikr70

Hello,
I would just like an update of the situation regarding the passkeys and GrapheneOS. Passkeys are now implemented in password managers and provide an excellent service. I understand that they are not ready on GrapheneOS. Is there a chance that they will be supported or shall their support remain Google's Propriety ? Will Vanadium also get support ?

p338k

How many password managers currently support passkeys on Android? I know of a few cross platform managers that support them on desktop.

Eirikr70

I use Bitwarden, which not yet implements passkeys in the android app. But the question is : will it be supported or will it architecturally be Google-related ?

p338k

Hopefully, they will use the credential manager API.

Relaks

Edit: oh, the question was concerning if it will be supported without Play Services. I didn't catch that and haven't tested it.

(There's no reason why third-party passkeys won't work with Chromium's credential manager API. They already did work with 1Password in Vanadium... until 1Password decided that Vanadium is not an approved web browser for dealing with passkeys, that is. Still works fine in Brave.

There's a topic on it here:
https://discuss.grapheneos.org/d/8184-graphene-os-lacks-3rd-party-passkey-support-on-android-14/16 )

Relaks

I have now tested Chromium's Credential Manager API for third-party passkeys in a profile without Play Services. Here's what I did:

Created a fresh new profile
Installed 1Password, signed in, and set it as default password and passkey manager.
Opened chrome://flags/ in Vanadium and tested all the options under "Android Credential Management for passkeys".
Tapped the passkey sign-in options on github.com and login.live.com. Github gave a message that the browser reports partial passkey support, and Microsoft gave a generic error. The passkey prompt did not appear.

Conclusion: It seems likely that the Credential Management API for third-party passkeys relies on Play Services.

p338k

Relaks

I believe Chromium's (and thus Vanadium's) FIDO support relies on Google Play services.