Passkeys for website access?

B

Bucky

Trying to up my security game. Using KeePassXC as my password manager. Login normally (username/password), go to "Password and Security" and click on +Passkey. Site reports an error but a passkey is registered in KeePassXC. Examining the .passkey file it looks fine. Logout of the website.

Login again by selecting Passkey as the method, click "Authenticate" in the KeePassXC window and I get this:

FreeBSD "Oops! We ran into some problems.
The given passkey or security key could not be verified. Please try again."

Tried it a couple of times including generating a new passkey. Fails each time with the same advisory.

Any thoughts? Passkeys work on another site I tried.
 
I have no idea what you are actually asking here. ARe you not able to open the keepass program, or not able to post the stored keepass credentials to a website? There is a big different here, and you're not being clear about your issue. For instance "go to password and securit and click..." is meaningless to me.

If it is that a website isn't accepting the credentials then make them "visible wthing the keepass GUI and manually type them into the webiste or use mouse cut-n-paste to test what the problem is.
 
Sorry I was unclear. This is only about using a Passkey to log into the website. Here is a more detailed explanation:

At the top of the FreeBSD Forums webpage, click on your name. That brings up the "Your Account" dropdown. From that dropdown, click on "Password and security". On the webpage displayed, click on "+ Add passkey". The website goes through some steps including wanting you to insert your hardware key device (Yubikey in my case) and dutifully adds a passkey to the Yubikey (I can see it by using either the Yubikey Manager or Yubikey Authenticator.)

I log out of the website. To log back in click on "Log in". One of the options is: "Log in using Passkey". Click on that. Insert the Yubikey into the USB port. Enter the Yubikey PIN, then touch the Yubikey. The next website screen proclaims: "Oops! We ran into some problems. The given passkey or security key could not be verified. Please try again." This failure is repeatable.

I can log in using username/password. But I want to see how the Passkey login system works and it fails as described. It looks like the FreeBSD website Passkey function only works with a hardware key, such as a Yubikey. Is that true?

Anyone else seen this behavior?
 
You must log in or register to reply here.
Back
Top