Hacker News Reader

Comment by Spunkie | Hacker News Reader

One of the benefits we saw moving from lastpass to bitwarden is it allow us to much more easily reduce duplicate entries for the same site/account.

So it's pretty annoying to see in the docs for this passkey feature that they just expect you to make a duplicate bitwarden entry for every additional passkey you need to add to an account. Especially when it's standard to register a backup key for any service that uses passkeys.

View on HN

What would be the purpose of having multiple passkeys for the same account stored in the same BitWarden vault? You're going to have a backup key and store it in the exact same place as the primary key?

The idea of passkeys is that they can be synced so you don't lose them when you lose a device. So there's a lot less need to have two

Multiple passkeys backed by different sources (password manager, iCloud, Yubikey, etc.) can serve as a backup in the case you lost access to your password manager, for example.

If a service provides the option for more than one passkey, I always configure several.

But that doesn't explain why you'd want multiple keys all in the same password manager. That seems to miss the point of the redundancy, like keeping an "offsite" backup onsite.

I can see the point of having multiple passkeys (e.g. backed by different passkey managers, like 1Password in addition to Bitwarden, or a combination of physical security keys and passkeys), as well as the point of being able to store multiple passkeys for different accounts in a single Bitwarden profile (e.g. for work and personal Google accounts).

But when would anyone need multiple passkeys for the same site account in the same Bitwarden vault?

> Especially when it's standard to register a backup key for any service that uses passkeys.

I’ve never heard of this for Passkeys, only for hardware keys.

Passkeys are meant to be something “that you have”, similar to one hardware key, why would you want to store 2 within the same password manager? What would that give you?

Reply on news.ycombinator.com