Hacker News Reader

Comment by embedding-shape | Hacker News Reader

> I store mine in my vaultwarden.

Can you export it from there? My main gripe with passkeys in 1Password is that seemingly you can't export them, unless you export it to "someone else", which isn't clear if that someone can be just "you".

View on HN

If your password vault supports https://fidoalliance.org/specifications-credential-exchange-... you can. (Bitwarden does)

Right, what if I don't know yet what password manager I want to move to? Can I just get the data or I'm only allowed to move this thing into something else I also don't actually own?

I don't know about all password managers, but with Bitwarden you can export to a JSON file.

exactly, I'm storing passkeys in Bitwarden, free account, no lock in. Single password to access all my logins. Works on all my devices. I don't see the issue

This is a violation of the spec you cited above and criticized by FIDO devs here:

https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

No, if your vault implements that then it can _not_ export to the user, as per §5.1.1.1:

  > Explicitly state that the orchestrating party only transmits the credential exchange data between the exporting provider and importing provider.

And, in accordance with the spec, 1Password (who is the _editor_ of that spec) refuses to export passkeys to the user in any file format.

Yes. I've done many imports/exports and have lost no passkeys with Vaultwarden.

Yes you can. I just tried it and it worked. I used the export functionality and exported my vault as json and the passkey is in there.

I do not know the answer to your question but mine are in Vaultwarden. This probably means I have access to them. The method to get them out might end up not being pretty but it should be possible.

> but it should be possible.

This was my expectation too, but since I haven't figured out 100% that it is actually possible, I haven't used any of it.

You can export them to Bitwarden and then export those to a file.

I agree that is annoying.

Reply on news.ycombinator.com