KeePassXC 2.7.7 with Passkeys | Hacker News Reader

KeePassXC 2.7.7 with Passkeys

keepassxc.org

67 pointsSami_Lehtinen17 comments

I've been waiting for an offline opensource implementation of passkeys not tied to a device or a company. This is good news.

This is really good news I have been looking forward to the release of Passkeys ever since they announced they were working on it.

Stupid question: Are passkeys basically the same thing as SSH-Keys?

This article compares ssh keys to passkeys (though its not the main point of the article):

https://lapcatsoftware.com/articles/2023/5/1.html

Discussion:

https://news.ycombinator.com/item?id=35854216

Interesting that Google allows you to use third party keypass provider, but when logging back in only offers to use one built in to the android phone

Wish there was an official mobile app

That would be nice. I've been using Keepass2android for years now though, and it's been really great!

KeePassDX[1]?

[1]: https://f-droid.org/en/packages/com.kunzisoft.keepass.libre/

+1 for KeePassDX, works great with my KeePassXC database.

Also been using it for a while. No complaints here.

Funny enough, it uses the zxcvbn Java clone [1] I wrote to estimate password strength and for new password generation.

[1]: https://github.com/GoSimpleLLC/nbvcxz

Neat. I've been using Vaultwarden to self host a BitWarden compatible sync server and it's been super painless, but if I ever decide to switch KeePassXC is my next choice.

Does anyone have experience with KeePassXC compatible mobile apps? Should it be expected that something like Keepassium should be getting support for this in a few months?

I am a little disappointed in Bitwarden’s current PassKey support and they still lack support for using PassKeys on mobile as far as I can tell.

Though to be fair to Bitwarden, PassKey support still seems like a 2nd class experience even using Chrome on Windows for some sites.

Bitwarden is working on native mobile apps as Xamarin is a dead end technology, so the app will probably get support for passkeys and better mobile integration in the future.

I have been happy with Strongbox for quite a few years.

Yes, KeePassium will support passkeys in a few months.

On Android, I use Keepass2Android [1]. It is open source, is updated frequently enough, and it's compatible with my Yubikey-backed databases.

Yubikey Challenge-Response for KeePassXC needs its own setting though, as KeePassXC made some design decision that is incompatible with KeePass, IIRC.

[1] https://github.com/PhilippC/keepass2android/

If you're on Android, I reccomend checking out KeePassDX

https://www.keepassdx.com/

Reply on news.ycombinator.com