Bitwarden and Passkeys Webcast

[@GregThomson]

Way to go Bitwarden!!! Love the work you are doing!!!

[@Mikesco3]

Bitwarden has been such a source of pleasure to my IT security life. And knowing that Bitwarden is covering passkeys brought me such a sense of relief...

[@AlexanderMielchen]

Did you mention when you plan to add Passkey Support for the iOS app?

[@coldbrew6104]

6:35 every tech guy has a cat

[@Bitwarden]

It's a necessity. 🐈‍⬛😎

[@CyberMedics]

Informative presentation. Thanks for keeping us up-to-date!

[@v3n0s]

Great podcast

[@RyanBond]

Thanks for the explanation. Next time more demos of signing in would have been helpful. Thanks

[@Bitwarden]

Hi there, you can watch a demo of creating and using a passkey with Bitwarden in this blog: bitwarden.com/blog/bitwarden-launches-passkey-management/ This demo will also be up on our KZbin channel shortly!

[@RyanBond]

@@Bitwarden that was great!

[@optionstraderman]

Is there a way as a Bitwarden home user to PREVENT Bitwarden from storing any Passkeys and instead have the default storage location point to my YubiKey 5 NCF hardware keys instead when setting up different my login accounts on different websites?? To clarify, I would like to store my login names and passwords within Bitwarden and put ALL Passkeys and 2FA info on my YubiKeys. Thanks!

[@tthecat819]

Is there any reason that Microsoft is not mentioned as a passkey supporter?

[@Samy-ck8oo]

is Google Titan 2 compatible with this ??

[@Loco_Epic]

Wait so yubikeys can hold both passkeys and 2fa? So if a website ask for a username and password and also a code for 2fa then yubikey can automaticly open /sign in with key ? So using a yubikey on bitwarden allows u to signin without masterpassword or pin now? And what stops someone in the family from taking ur key and use passkey and 2fa with yubikey? Also doesnt saving usernames and passwords and 2fa kinda make that a weakpoint .

[@optionstraderman]

I just got a few YubiKeys this week, and from what I have found so far, sites I have setup generally require your Login name and Password in addition to your Physical YubiKey + Yubico Authenticator (to generate a 2FA Code locally) and optionally a PIN code to unlock the Yubikey, to actually login to their site. So you really have up to 6 things required to login to a website. Login name, Password, 2FA Code, Yubico Authenticator, Physical YubiKey, Optional YubiKey PIN Code + a touch of the key. YubiKeys combined with Yubico Authenticator plus the physical key allow you to generate the 2FA key locally instead of having one sent via text or email or phone call, all of which could be intercepted or sent to a phone that was sim swapped, and having to provide a physical YubiKey to complete the login is what is making your login more secure. A thief would likely not have all these things at once to allow them access to your web accounts.

[@plumbgray]

Long time Bitwarden user and my go to PM Could someone answer my concern that with passkeys when using your finger print could agencies that have access to your biometric fingerprint data also gain access to your data? For instance law enforcement or border control ? I really like the idea of password less but need to eliminate this nagging thought of big brother having key to our data. Thank you in advance

[@kevinmcfarlane2752]

As I understand it, mere possession of fingerprint data is not enough. Law enforcement would need access both to your phone and you at the same time and would need to force your thumbs onto the phone. But that applies in general, not just for passkeys.

[@BrianWestwood-m9d]

Jumpscare at 4:17