DEV Community

Cover image for KeePass Passkeys: Analysis of KeePassXC Passkeys

KeePass Passkeys: Analysis of KeePassXC Passkeys

vdelitz on November 22, 2023

Introduction to KeePassXC’s Passkey Advancement KeePassXC, a prominent figure in password management, has recently integrated passkey su...
Collapse
 
joyfuldev profile image
Tom Joy

The absence of attestation could cause inferior user experience and challenges with the confirmation of a passkey’s authenticity.

Attestation of what specifically?

Collapse
 
vdelitz profile image
vdelitz • Edited

The attestation of the authenticator (the device which creates the passkey). In this case, the "device" is the password manager, so KeePassXC. This means that it's not detectable that a passkey was created and stored in KeePassXC, see also here