Comment by tennysont

> for both a format and secure protocol

No, there is a working draft of a protocol. The "format" is only for use in the protocol, not a separate thing. Thus, giving the user a file is disallowed under the spec as per §5.1.1.1 which reads

  > Explicitly state that the orchestrating party only transmits the credential exchange data between the exporting provider and importing provider.

And, in accordance with the spec, 1Password refuses to export passkeys directly to users for manual import on another platform or app. FIDO developers have complained about Keepassxc violating the spec and threatened to blacklist them as a result[1].

Furthermore, 1Password (who is apparently leading the way on the FIDO exchange protocol design) has not implemented _any_ passkey export on _any_ desktop platform.

It is interesting that you listed Bitwarden, since I believe that FIDO developers have specifically disavowed Bitwarden's behavior of allowing users to access their passkeys.

[1] https://github.com/keepassxreboot/keepassxc/issues/10407

[2] https://github.com/keepassxreboot/keepassxc/issues/10407#iss...