The FIDO Alliance is aware of passkey lock-in, and it’s actively working to address that:

With all relevant operating systems now natively supporting passkeys, companies have been increasingly adopting them as an alternative to passwords. Relying on passkeys minimizes the risk of getting hacked, as users don’t have access to their cryptographic keys, and intercepting them is significantly more challenging. However, those switching between different service providers may prefer traditional passwords, as there’s currently no easy way to import or export passkeys. To minimize the friction separating distinct platforms, the FIDO Alliance is working on a solution that makes moving passkeys between them a breeze.

The FIDO Alliance has published (via Neowin) a working draft encompassing specifications that would make moving passkeys between providers possible. When implemented, users would be able to securely import and export their passkeys, making switching platforms less challenging. Read more of the article.


More

Forbes: Face It — Biometrics to be big in cybersecurity

With recent FIDO implementations from Google and Microsoft, strong authentication has seen big momentum –…

Read More →

The Inquirer: GitHub adds WebAuthn support for biometric and security key logins

GitHub now allows for login with WebAuthn, supporting security keys via Firefox, Chrome, macOS, Linux…

Read More →

SecurityWeek: Ready or Not, Here Comes FIDO: How to Prepare for Success

As we move into a passwordless world, now is the time for organizations to strategically…

Read More →