You’ll be able to import and export passkeys between password managers
A draft new specification allows for the secure import and export of credentials, meaning you’ll be able to move passkeys between password managers.
The FIDO Alliance introduced passkeys as a password replacement in 2022. With a passkey, you can log in to an app or website using biometrics or a physical security key, increasing security significantly. Passkey makes it possible to log in to your Apple Account on the web using Face ID without ever typing your password.
And soon, you’ll be able to import and export your passkeys securely. The FIDO Alliance just drafted a new specification to make passkeys portable though members will need to approve it before technology companies can implement it.
In other words, the ability to import and export passkeys will probably arrive alongside iOS 19, iPadOS 19 and macOS 16 in 2025. It will make passkeys easily portable between different password managers like Dashlane, Laspass, NordPass and 1Password, which is already working on implementing this feature.
Passkeys will gain import and export capabilities
The new specification relies on a pair of newly developed formats which allow for easy transfer of various types of credentials, including passkeys, called Credential Exchange Protocol (CXP) and Credential Exchange Format (CXF).
They use encryption for the secure movement of credentials, protecting passkeys during transfer. This is way better and safer than the CSV format password managers typically use to import and export your credentials in the clear.
Apple, a FIDO Alliance member, was among the first companies to bring support for passkeys (iOS 16+ required). Passkeys in the Apple ecosystem sync across devices via iCloud. You can also use a passkey stored on one device to log in to an app or website on your other device by scanning a QR Code with your iPhone.
My experience with passkeys is a mixed bag
Passkey adoption has been somewhat slow and rocky, as not all sites and apps support them. I’ve been using passkeys, but they often frustrate me. Too many websites implement them poorl or hide the passkey login option from plain sight. I shouldn’t read support pages to figure out where to find the passkey option.
I’ve also had issues with some sites when upgrading my account with the traditional username and password to a passkey login, especially if the account also uses the Sign in with Apple option. The situation has improved in the past year as companies realize people prefer passwordless options over social logins. According to the FIDO Alliance, more than 12 billion online accounts can be accessed with passkeys.
Passkeys in iOS 18
Apple provides new APIs for developers in iOS 18, iPadOS 18 and macOS Sequoia to allow apps to automatically upgrade the password login to a passkey. The user sees a notification that a passkey has been created for their account in an app or website, reducing friction when transitioning to the passkey login.
In iOS 18, the management of passkeys, passwords and other secrets has moved from the Settings app to a new Passwords app. The Passwords app lets you store credentials for websites and apps, such as passwords, passkeys, Wi-Fi passwords, verification codes for two-factor authentication and more.
Source link: https://www.idownloadblog.com/2024/10/16/fido-alliance-import-export-passkeys-draft-specification/
Leave a Reply