Passkey implementation and usage

Agreed: "A simple, if possible, tutorial/article on setting up Passkeys for one app that is accessed from Windows (2 devices), and a cellphone." Passwords are so important that using a different process without a clear understanding is beyond a concern.

Excellent thread. I am also exploring transitioning from passwords, and some 2FA where warranted, to Passkeys.

Read and viewed numerous articles/ videos on Passkeys. It all makes sense and looks very similar to a Public Key Infrastructure system implemented way back in 2006 at my employer. It all makes sense and seems real simple until you run into the great world we all, or most of us, live in.

Our home environment is a Windows desktop, a Windows Laptop, a Pixel 7 and 1Password. My wife also uses the two Windows devices and has her own Pixel 6. I keep the SW as up to date as possible. This creates all sorts of anxiety when she is confronted with "transparent SW changes". The later is a great source of concern as she struggled with 2FA for banking/Credit Card accounts.

So what is missing is a simple, if possible, tutorial/article on setting up Passkeys for one app that is accessed from Windows (2 devices), and a cellphone. A few pointers on the need for Biometric authentication, and what happens if this is not available on one or more devices.

If I understand everything I've read, a separate Passkey (device registration) will be required for each device and will be linked to the account. I believe this is required to login to an account with passkeys from each device without requiring a separate device to "authenticate". Pardon me for not having the terminology correct as I'm sure some of what I've written is not using the correct terminology.

BTW: Seems to me each Vendor playing in the Passkey space (Google, Microsoft, and 1Password) include some product sales/marketing in their user help/tutorials and this does help confuse it for us great unwashed.

BTW2: Given my "tech support" role in our house, it strikes me one of the impediments to Passkey implementation is the level of technical information that is being provided/needed to use Passkeys. Suspect this is required due to the implementation/adoption phase of Passkeys.

Thanks for opening this thread, it captures my issues perfectly.

This post captures my questions perfectly as I just created my first few passkeys this week. We need strategies in general as most of us now have a PW, passkey, and 2FA set up. We need advice on removing unneeded items to create a safe login while leaving a minimal set of attack vectors in place. I'm going to pile on my questions, hoping that others see them and respond,

1) One of the things I have in the back of my mind is if some of the advice would be based on how passkeys were implemented on the different web sites. Is this assumption correct?

2) When I was researching hardware devices, it was mentioned that a backup plan was necessary if the hardware was lost. I believe the advice was to set up 2 hardware devices in case you lost one so you could at least login and remove the 1st device.

In the instance of using 1password, I would not think that would be necessary as you have software copies of the passkeys on multiple devices. I would like this advice to be validated per the second comment from the OP, who received the "Your device is not registered" message.

I would think that a passkey is a passkey regardless of the device the client is using. My other thought on this is that the message the OP received above was sent due to a web site specific validation which might have been outside of the protocol used for the validation of passkeys.

(I do believe that one web site gave me a recovery key to be used but I'm going from memory on that one and just want to focus on getting these questions posted for now)

3) I share a few accounts with my kids (now adults), one who has their own 1password account, and one who does not.
I typically share a 1password link with the kid who has 1password and life is good. I've done this when creating OTP's and would assume the passkeys would migrate over too. Am I Correct on this assumption?

4) With the kid that doesn't use 1password, I managed to get him set up such that he uses a 3rd party app with the OTP key that I originally created with 1password. My kid who uses 1password quickly saw the value of it, but I'm still working on the other kid to start using it instead of using scraps of paper. Is there a way to export a passkey so that kid can temporarily use passkeys with a 3rd party app during the interim period?

Thanks in advance for any responses?
Fredrick (Rick) Apel

Just following up on this. I am especially curious about the situation #2. Thank you.