Allow BIBP account passkeys to be saved to YubiKeys
I feel like HIBP account passkeys should be allowed to be saved to YubiKeys in addition to just password managers and device passkey managers. It always irks me when passkeys are restricted to only certain locations and formats.
Already does this.
-
For anyone still having issues, we've just pushed another fix, try again and let us know if issues persist. The more info the better (device, OS, key type, etc)
-
user543026
commented
We have the same problem. While we have been using Passkeys on different Hardware Tokens (Yubikey, Nitrokey) and password managers (Psono.com) with HIBP the browser is presenting a warning that the device does not support passkeys. This information is displayed by the browser so there might be some compatibility issue with what type or version of passkeys can be used.
-
Damariobros
commented
Nope, still can't save one to my yubikey. Still not completely fixed.
It seems to me that it's only working in Windows 11.
I cannot get it to work on my Windows 10 machine or on my iPad. A friend of mine was able to get it to work on Windows 11, but not anywhere else.
-
Damariobros
commented
Now I tested it in Brave, which is a Chrome-based browser. Same deal. With Bitwarden and Windows Hello disabled, it simply errors out.
-
Damariobros
commented
No, it does not. I attempted to add my YubiKey on 2 different platforms, my iPad and my Windows 10 PC in Firefox.
On my iPad, when adding the passkey, the "Other Options" button was completely absent, and only showed my platform passkeys options such as Bitwarden and the iOS Passwords app.
On Firefox in Windows 10, trying to create the passkey made Bitwarden pop up, and the "Use Hardware Security Key" and "Exempt This Site" buttons were completely absent. When I disabled the bitwarden extension to force it to invoke Windows authentication instead, it simply errored out when I clicked Add Passkey.
The only place I can attempt to use a security key is when I attempt to sign into the HIBP dashboard, but I cannot use it when actually creating a passkey.