Support WebAuthn Passkeys

[era]

Firefox supports WebAuthn, but as far as I could tell only with hardware tokens. I could not find a word about Firefoxs support of Passkeys (like Apple announced recently) anywhere

Personally I don't know why passkeys werent adopted much sooner, it seems such a long hanging fruit to just store the key in the FF password manager.

I use FF to support a web where there is not only one option, like Chrome, but FF keeps falling behind and behind instead of being at the forefront. This should be a top priority.

[Honza]

We are actively working on supporting this feature.

Here is our current roadmap (might change):

• WebAuthn Level 1 + CTAP2 is riding the trains for Fx 114
• WebAuthn Level 2 + 3 are planned to ride the Fx 116 train
• Passkeys (though details are still about to figured out) earliest completion is Fx 120

[slyoldfox]

Sure would love to see this implemented

[Varpie]

From @Honza 's response, it seems like the status of this idea is not up to date. It should be updated from Trending idea to In development.

[labib]

work

[markus1]

Ich have implemented Passkey-Support for one of my websites and it is great except the support of Firefox on Desktop. Firefox on iOS can fall back to iCloud Keychain but the Desktop-Version needs to integrate it in the Firefox Password Manager (which is available on iOS too).

I am a Firefox User since the Version 2.0 therefore there should be no doubt that I like Firefox. But the lack of support of Passkeys lets me think of switching to Safari or Chrome or Edge because it is really convenient and I am a web developer who quickly uses new technologies for existing websites and I would love to sell this passkey feature to administrators. At the moment I can only say to my customers and friends - use one of the other browsers to use Passkeys for my websites which I think is sad.

If anytime this year (2023) Passkey-Support is implemented I will keep (or come back) using Firefox.
I hope for the best but I know it is a lot of work for you guys to implement this Passkey feature.

[SilleBille]

I have been a loyal FF user for almost 10+ years. But, seeing my other colleagues use the Fingerprint to authenticate on Chrome makes me jealous. I have been waiting for this feature to get deployed. Hopefully this saves me typing 20+ character password + tap approve on phone  everytime i visit my corp website!

[Jon]

Hey all,

Good news...

This is being worked on — check out @Honza's post for additional details including a brief outline of the current timeline.

As always, keep the conversation going and stay tuned for updates 💪

[Jon]

Hey all,

Good news...

This is being worked on — check out @Honza's post for additional details including a brief outline of the current timeline.

As always, keep the conversation going and stay tuned for updates 💪

[Jon]

Hey all,

Good news...

This is being worked on — check out @Honza's post for additional details including a brief outline of the current timeline.

As always, keep the conversation going and stay tuned for updates 💪

[Jon]

Hey all,

Good news...

This is being worked on — check out @Honza's post for additional details including a brief outline of the current timeline.

As always, keep the conversation going and stay tuned for updates 💪

[mangoIsTasty]

Hi @Jon,

Unfortunately I can't view @Honza's post that specifies the roadmap for adding improved Webauthn access (e.g. QR code scanning with mobile to support cross-platform mobile authenticators over BLE transport).

Look forward to receiving updates.

Kind regards.

[Jon]

Thanks for the heads up, @mangoIsTasty - it should be in this thread, but I'll copy & paste it here so it's more visible:

"Here is our current roadmap (might change):

• WebAuthn Level 1 + CTAP2 is riding the trains for Fx 114
• WebAuthn Level 2 + 3 are planned to ride the Fx 116 train
• Passkeys (though details are still about to figured out) earliest completion is Fx 120"

[Eatham]

This is needed. On Chrome, it gives you the option to use another device that you have the passkey on, but i don't like chrome and every browser should have proper passkey support. Also, you should be able to logon to a firefox account with a passkey too.

[thebjorn]

With 115.0b3 I'm able to sign into https://passkeys-demo.appspot.com with a passkey created from Chrome (even if FF insists that "This device does not support passkeys...").

[Corebreak]

You mean via QR code that is shown by Firefox and the passkey was created by Chrome on Android?

[thebjorn]

No, passkey was created from chrome canary (and presumably windows 11, I had my yubikey 5 present but it seemed to use windows helo), then I could use it from Firefox dev. 

[ianjs]

Passkeys are really gaining momentum. Firefox is going to be left behind if this isn't implemented in a timely manner.

I'd hate to see the only real alternative to Chrome losing more market share by being perceived as less safe or harder to use.

[Corebreak]

It seems that Windows Hello soon also supports passkeys that are stored on the phone. Thus, passkeys could then also be used in Firefox and native apps.

https://blogs.windows.com/windows-insider/2023/06/22/announcing-windows-11-insider-preview-build-234...