passkeys interceptor bypass

Passkeys interceptor in browsers extension should optionally allow passkey request to be passed to other passkey provider. At least should be possible to sign-in using browser built-in provider that will allow use of hw tokens, instead of password manager extension.

Bitwarden has option to pass individual passkey request to browser native passkey handler. PearPass have option in extension settings to β€œnever” use passkeys, but passkey request is intercepted by pearPass anyway, and when closed, no option to use browser native passkey provider. Right now in my browser the only way to use browser native passkey provider is to disable PearPass extension entirely in browser settings every time when i need to use it.

Why this is important?

1 - hardware tokens could be used to create passkeys, which is more secure by design then any software password manager, also phone local-only storage could be used.

2 - while testing different password managers, i have a few passkeys enabled extensions installed for testing, this feature should simplify user onboarding and migrations of users with existing passkeys.


See bitwarden extension for reference. (screenshot attached)

Please authenticate to join the conversation.

Upvoters
Board
πŸ’‘

Feature Requests

Date

About 2 months ago

Author

vlad shurbin

Subscribe to post

Get notified by email when there are changes.