Comment by limagnolia

8 days ago

If your password vault supports https://fidoalliance.org/specifications-credential-exchange-... you can. (Bitwarden does)

5 comments

limagnolia

tennysont 6 days ago

No, if your vault implements that then it can _not_ export to the user, as per §5.1.1.1:

  > Explicitly state that the orchestrating party only transmits the credential exchange data between the exporting provider and importing provider.

And, in accordance with the spec, 1Password (who is the _editor_ of that spec) refuses to export passkeys to the user in any file format.

embedding-shape 7 days ago

Right, what if I don't know yet what password manager I want to move to? Can I just get the data or I'm only allowed to move this thing into something else I also don't actually own?

limagnolia 7 days ago
I don't know about all password managers, but with Bitwarden you can export to a JSON file.
- tennysont 6 days ago
  
  This is a violation of the spec you cited above and criticized by FIDO devs here:
  https://github.com/keepassxreboot/keepassxc/issues/10407#iss...
- rpwverheij 7 days ago
  
  exactly, I'm storing passkeys in Bitwarden, free account, no lock in. Single password to access all my logins. Works on all my devices. I don't see the issue