Forum Discussion

hehemrin's avatar
hehemrin
New Contributor
2 months ago

FIDO passkey Cross-Device Authentication (CDA)

I try to understand how I can login to eg a web site with passkeys on a device where I do not have the keys in any way. A practical use case example to explain: I have an account at LinkedIn. I have added a passkey in 1Password for LinkedIn. I go to a laptop where I do not have any passkey stored, nor 1Password installed (for example if I visit a friend). My testing is done on Linux laptop (LMDE 7). Two separate questions: 

  1. On Firefox, I cannot find any option to choose Cross-Device Authentification. Is it because this function is not implemented in Firefox, or am I doing anything wrong?
  2. On Chromium I can right click in the e-mail box and get a meny where I indeed can choose Cross-Device Authentification, a QR code is shown up. I then open my Android phone (/e/OS "de-googled OS"). But I cannot find any procedure inside 1Password or any other method to scan that QR code and login with the Cross-Device Authentification method stored in 1Password. Should it work? 

Reference: Passkeys FAQ at https://fidoalliance.org/passkeys/

passkeys

1 Reply

  • hehemrin's avatar
    hehemrin
    New Contributor
    2 hours ago

    Updating this topic myself:

    1. I believe Firefox (148) does not support the Cross-Device Authentification, but I have not read to confirm.
    2. After some investigation, I have come further. 1Password app for Android requires Android 14 for this to work. I have not tested on /e/OS Android 14, as my mobile with /e/OS is older and only has Android 12. But during this time period since I asked the question, I have switched to a mobile having Iodé OS (another "de-googled" Android) based on Android 15. As for now, it appears as cross-device authentification is not working yet with microG (replacing Google Play Services). So my issue is likely related to the fact that I use a de-googled Android. For anyone interested, you can read my post at the Iodé community and the bug report at the microG github: 

      1. https://community.iode.tech/t/passkeys-cross-device-authentification-with-qr-code-using-password-manager/7675

      2. https://github.com/microg/GmsCore/issues/3290