It depends on the app you’re using to save passkeys. Use Keepass and it saves the passkeys into kdbx file (similar to SSH keys).

▲

cpburns2009 2 days ago | parent [-]

Aren't they effectively locked in the database of whatever password manager is used? I know you can export them, sort of, but that feature may blacklist your password manager and make it useless. Are they portable? I thought passkeys are locked to the device.

	▲	Telaneo 2 days ago \| parent \| next [-]
		> Aren't they effectively locked in the database of whatever password manager is used? Not in the case of Keepass, since you can export them. > I know you can export them, sort of, but that feature may blacklist your password manager and make it useless. Yes, and this is why passkeys are flawed. > Are they portable? I thought passkeys are locked to the device. There's nothing preventing you from syncing your passkeys and using them on different devices. This even seems to be the happy path in the locked down eco systems (You can create a passkey on an iPhone, which is then synced to iCloud, and now you can use that same passkey on a Mac).
	▲	microflash 2 days ago \| parent \| prev [-]
		I was answering to the storage part. Blacklisting is the attestation part which is definitely a concern. Again, you can use passkeys as a yet another way to login. You can still use passwords. It doesn’t have to be one or other.