I added a Duo Touch ID 2fa 2 years ago when I'm on macOS 12 that don't support Chrome saving passkey to iCloud. I'm still on macOS 12 but I can use iCloud passkey in Safari. Is it possible to import Chrome passkey to iCloud / Safari manually?

Shop computer returns: I am left wondering: * What exactly is the problem? * Do I need to configure the Google account so that it knows my iphone or Mac has the passkey? * How can I query the Google account settings to determine what device holds the relevant passkey?

Why are Passkeys on one Apple iPhone device showing for some Apple IDs but not for other Apple IDs When trying to login to iCloud.com On iPhone which is running iOS 18.3.2 (latest currently), the option to create and then use passkeys shows up for some Apple IDs, while it does not appear for other Apple IDs on the same iPhone. This is not as per Apple support Articles. https://support.apple.com/en-in/guide/iphone/iphf538ea8d0/ios To explain my problem in detail: I have three Apple IDs, but I get option to create & use passkeys for only one Apple ID. For the second Apple ID, I get no button of Use Passkeys upon login screen. For the third Apple ID, the Use passkeys button appears on login screen, but upon clicking it the option to use passkeys for first Apple ID appears without allowing to create a new passkey for the third Apple ID. iCloud Keychain and TFA are both turned on for all the iCloud accounts. I have tried to login to the each of the Apple IDs on the same iPhone. Yet irrespective of the Apple ID used to login on the iPhone, the option for passkeys does not appear for any Apple ID except the first Apple ID. How to ensure option for passkeys shows up for all Apple IDs.

When I enter my email to sign into https://www.icloud.com/ , it shows an option to sign in with a passkey. When I select it, it tries to get a passkey from my password option, and there seems to be no option to create one in Apple account settings, or on the betas on macOS 15 and iOS 18.

Safari prompted me to authenticate to ioc.exchange today, when I had no Safari tabs or windows with ioc.exchange open. I do have an ioc.exchange account that I use only rarely. I do not have ioc.exchange set up in Internet Accounts, and I was in Safari when the popup surfaced. Edit: Someone may be poking around ... I just got an unsolicited push MFA request from Microsoft Authenticator. Probably just a coincidence but wanted to mention it. Edit 2: Not answer but I spoke with someone involved in the development of FIDO2 specs who assured me the dialog box could only pop up if "... something made a call from that origin in an app or browser." What would have made a call from ioc.exchange to my browser is beyond me. Are there any non-sketchy reasons this might happen? As far as I know webauthn/passkeys doesn't support a push authentication model (someone somewhere else trying to log in as me resulting in a prompt on my machine).

I have already created a passkey for my Google account and assigned to the AppleID Keychain. Thus I assume that my BigSur machine has access to the passkey. Google indicates that Safari 16.1 is the minimum for Google passkeys. Google also indicates it Ventura (MacOS13) is necessary to CREATE the passkey. My Monterey (MacOS12) machine has AppleID Keychain access and has successfully authenticated via Passkey through Safari. Therefore, I think it reasonable to expect that I can do the same on Safari 16.6.1 running on BigSur 11.7.10. Why does authentication hang as shown in the screenshot? Any troubleshooting suggestions are appreciated. Thank you

I'd like to list all accounts with passkeys (Webauthn credentials) stored in my iCloud Keychain. * **I don't need to _export_ the passkeys** (although I'd like to be able to, but this is a different question). * I merely want to have a **list of all accounts that have a stored passkey.** It can be either via command-line, system API, or a GUI app. Is this possible?

I have four accounts on google.com. I want to add a passkey for every account by scanning a passkey QR code. However, I can only add one passkey for google.com. When I try add a new passkey for a new account, it replaces the previous one. I understand that Apple allows one passkey for a domain. Is it right ?

Apparently passkey access can be controlled with biometric sensors. Can? How does one setup the iPhone / iPad's FaceID to control access to the passkeys?

Reading about passkeys in the iOS change log I get the impression that they're just private keys used to sign requests with, just like physical security keys: > Passkeys never leave your device Sounds reasonable, since the OS would only need an interface for signing — never actual read access to the key. Then I read this: > Passkeys are end‑to‑end encrypted and sync across your Apple devices Uh... Obviously not, since they "never leave your device". How does that work?

To put it more precisely, can Apple's new Passkeys feature allow Apple devices to basically use their built-in Secure Enclaves like built-in U2F devices, replacing external USB security dongles like YubiKeys? So your two factor authentication (2FA) factors become "something you have" (an Apple device with your Passkey private keys in the Secure Enclave), and "something you are" (your face/fingerprint biometrics)? I seem to recall that the new Passkeys feature that Apple announced at WWDC 2022 to be in Apple's Fall 2022 OS updates (iOS 16, macOS 13 Ventura, Safari 16, etc.) seems to be built, at least in part, on industry standard authentication schemes such as FIDO2. I know FIDO2 is what allows "Universal Second Factor" (U2F) devices like YubiKey USB dongles to work as a physical multifactor authentication (MFA) devices. Putting those two things together, does that mean that the Passkeys feature will allow me to use my Apple devices (via FaceID/TouchID and Secure Enclave) as FIDO2 U2F devices, obviating the need for dedicated U2F USB dongles such as YubiKeys? For a concrete example, when signing into Amazon Web Services (AWS), one option for MFA is to use FIDO2 to support things like YubiKeys; this keeps you from needing to hassle with getting a 6-digit TOTP code from an Authenticator apps, or using insecure SMS to get a code sent to you. I'm hoping I'll be able to select that MFA method on AWS but set it up to use Passkeys instead of needing a YubiKey.