bitwarden / passkeys-index Goto Github PK

We at 2factorauth created the Passkeys Directory a while back. It has all the existing sites from our 2FA Directory, a service which Bitwarden already uses. We were wondering if there was any prior knowledge of the Passkeys Directory and whether Bitwarden plans to use this passkeys index or switch to our API.

Currently the list contains Privacy Guides Forum and Techlore Discussions, which I find weird as passkeys are a Discourse feature and nothing specific to Privacy Guides Forum or Techlore Discussions.

• https://meta.discourse.org/t/passwordless-login-using-passkeys/285589

Otherwise I wonder if every countless Discourse instance should be listed separately including the one by Bitwarden?

Yubico's Works with Yubikey is a massive catalog containing tons of services that support FIDO2/WebAuthn and 2FA, and other additional security protocol (OpenPGP, Challenge-Response, TOTP, HOTP, etc.)

We could use their catalog as a reference to add more sites and services that support passkey into the index.

https://discuss.techlore.tech/
https://discuss.privacyguides.net/

To increase the usability of this repo, especially for non-developers who may not be familiar with Github, it would be nice to have the list of supported sites in the repo README. Then if one wanted to share this list with a friend who is interested in passkey support, we could simply share the repo URL instead of the file URL. Currently the repo home page showing the README doesn't provide much useful info.

Appreciate that there may have been reasoning for separating the files but thought I'd at least propose this change, especially if there was non-developers viewing the page.

https://support.kraken.com/hc/en-us/articles/what-is-a-passkey

• https://forgejo.org
• https://about.gitea.com
• https://about.gitlab.com

I apologise for opening multiple issues in quick succession, I think this is all where I know of passkeys support having set it up with Bitwarden, that weren't already listed.

Authentik is an open-source identity and access management solution and it supports passkeys including for login without having to enter username or password.

• https://goauthentik.io
• https://github.com/goauthentik/authentik
• https://docs.goauthentik.io/docs/flow/stages/authenticator_validate/#passwordless-authentication

I am mostly seeing at https://login.pikaviestin.fi personally, but I understand it to be widely used.

I would suggest adding the following columns:

• Allows PKs for login
• Allows PKs for 2fa
• Asks for 2fa after login with PKs
• Which devices are allowed to use PKs? [all, mobile-only]

Microsoft.com only support Two-factor authentication