Where is the passkey saved? Can I take it out and back it up? Can I use it on another device, running a completely different OS? If I lose this device the passkey is on, what happens?
I am using Bitwarden client with self-hosted vaultwarden and answers to all of those are: my server, yes, yes, if I lose all my devices and the server at the same time I lose access to my passkeys, and all my passwords for that matter. If I have my server, or at least one of my other devices, they are all on my device.
Never used. Each time a website asks me if I want to create one I have this uneasy feeling of not actually owning the key.
You’re not wrong to have that feeling.
Where is the passkey saved? Can I take it out and back it up? Can I use it on another device, running a completely different OS? If I lose this device the passkey is on, what happens?
The answers to most of these is negative.
I am using Bitwarden client with self-hosted vaultwarden and answers to all of those are: my server, yes, yes, if I lose all my devices and the server at the same time I lose access to my passkeys, and all my passwords for that matter. If I have my server, or at least one of my other devices, they are all on my device.
That is the issue of passkeys. They are hard to understand and without understanding there can be no trust.