Remix.run Logo
sitting33 17 hours ago

Passkeys are supposed to cover two authentication factors at once (having your device + biometrics). Because your yubikey doesn't implement biometrics, it's only a single factor, and thus cannot be used as a passkey.

deepsun 16 hours ago | parent | next [-]

Yubikey can be used as passkey atorage, I do it on Linux desktop/laptop with passkeys. It requires touching it (but no biometrics). I just couldn't make Android ask my hardware device, it wants to handle passkeys by itself.

It's false that passkeys cover biometrics. They cover password + OTP (aka 2FA aka MFA, although BestBuy requires OTP even after logging in with a passkey).

palata 16 hours ago | parent | prev [-]

Well a Yubikey can require a password/PIN. So having your device + knowing the password.