Hacker News Reader

Passkeys are just the product-facing name for WebAuthN, which FIDO2 devices should support. Theoretically, any FIDO2 device should support WebAuthN and therefore be used for websites, but right now there are a number of different implementations that each have their own quirks.

I am surprised that the FIDO2 key doesn't work on Google, but it probably just means that there is a bug somewhere in the implementation.

View on HN

This is not true, Passkeys is the marketing term for Webauthn with resident keys.

It's surprisingly difficult to figure what what a passkey is, precisely. I think there's a bit of a terminology issue.

FIDO marketing materials talk about passkeys in the same way you do, a resident key (now called discoverable credentials). Some other materials say that passkey with no other qualifier is a multi-device passkey, meaning it's backed up by a sync fabric. (e.g. the short version here https://passkeys.dev/docs/reference/terms/#passkey). Others, like Google did in their blogpost last week and the long version of that link, say that a passkey is a multi-device passkey that also has user verification (so it can be used for passwordless and not just 2FA/2SV).

Thanks, that's what I figured. Here's to a future where WebAuthn is everywhere and my password manager can finally only need to store one key.

Reply on news.ycombinator.com