Faster Logins with Passkeys | Bitwarden Passkey Tutorial

Bitwarden finally supports passkeys! It's available for all Bitwarden accounts, including their free version. Bitwarden's synchronized passkey feature allows you to use passkey across multiple devices.

Take action now to set up your FIDO2 WebAuthN passkeys today!

Links

❤️ Leave a comment and hit the like button because it helps spread cyber security knowledge to more people.

Table of Contents
00:00 - Intro
00:40 - Passkey overview
02:31 - How to set up passkeys
04:55 - How to use multiple passkeys for the same site
06:41 - Future passkey features
07:13 - Device and website support
07:55 - Closing

🔔If you found this helpful, subscribe to the channel!

🚀 Connect with me on LinkedIn

[rwg]

My wife is a non computer person and she was watching this with me and was asking how passkeys work. After a few minutes of her listening to me and not understanding what I was talking about she finally came up with an analogy that I think actually describes past keys very well.

She said it's kind of like a lock and a key.

And I think that's a very good analogy. In this case Bitwarden creates both the lock and key which is unique in the whole universe and it gives the lock to the web site. Bitwarden keeps the only key available to that lock.

[Johnlayne]

Thanks quickest explanation I've seen.

[ricardovargas]

I really hope that, overtime, more webpages use Passkey as as sign-in method and not as a MFA.

[MindBlower]

This is great information 👍
Thx from Munich 😉

[John-fjqw]

Another excellent tutorial, thanks for staying on top of this tech, I have learned a great deal from your videos. Could you make a bitwarden tutorial for mobile use.

[redblitz]

Thanks for the video - very useful!

On a sidenote - what is your Chrome theme called? Love that dark blue gradient!

[joeyc]

Thank you for this explanation, Jason. Is this something you can do only for new accounts?

For example, if I wanted to use passkeys on an existing social media account, is it a similar process? Sorry if I missed something in the video :)

[puduville]

Great video. Remeber one thing till we get ride of less secure pwd recovery processes like via email recovery etc or we eliminate the pwd on the site( options that sites need to start providing) this will not be more secure.

[TonyDL]

Great video, thank you! I've decided to give passkeys a try after being nagged a few times and now seeing your video... So I've done 2 of them and it seems seamless as you show. BUT how do I list my user accounts in Bitwarden where I've enabled a passkey? I don't want to lose track of which ones I've enabled it on. Also, if a website allows BOTH passwords and passkeys, isn't that less secure? Thanks!

[Marco-cekr]

Q: so If I have a password previously set in a website and later I set a passkey, I'll be able to use both or just the passkey ? and don't forget Nordpass tutorial for future videos

[luigi]

Sorry but saving the passkeys on Bitwarden in my opinion is less secure than saving them on your device, this is because correct me if I'm wrong, by saving them on Bitwarden if they ever enter my vault, with the passkeys they could access the sites they want, whereas if they are saved on the device (like a phone) to then use a passkey you also need biometric authentication, so it's an additional security check in addition, don't you think?

[GrouseHiker]

Does the private passkey have to be remembered, or is it encrypted on the device? Does anything have to be remembered? It seems that if it's stored on the device, the the weak link is the device login... not the website login.

[robtihanyi]

Nice work Jason. I wish somebody who knows about computer stuff will at some point design an app to get a non computer user to be able to set up and use passkeys and indeed password managers. Nobody seems to understand that what seems like a "simple setup" to a computer user makes no sense at all to a non computer user. Until somebody designs a system to get this done the people who stand to gain the most from passkeys/password managers are the people who will continue to be the ones that are unable to access the service...just saying.

[WE-vdux]

when i create a passkey like you in your video the public key will be saved in bitwarden.
What about the private key which usually is saved on the local authenticator?

what does sync of passkey mean?
Sync the private key from one device to another? How will they be stored there? does this happen automatically`?

[bigjoegamer]

Thanks for the info. Good video. I'm looking forward to device-bound passkey management on Linux, and the ability to use passkeys to sign in to Linux apps and websites without downloading a password manager or using a browser's built-in password manager.

Also, the ability to import and export passkeys across all of my devices and password managers would be awesome. For example, exporting my Bitwarden passkeys to a file (encrypted or unencrypted) and then importing them into an Android phone or iPhone or Linux/Windows/macOS computer or another password manager. Or just skipping the "file" part and letting me choose from a menu which device or password manager I want to send my exported passkeys to.

[petearmstrong]

Here is the scenario - passwords no longer used and a person now has 200 device-bound passkeys on a Windows laptop or Android (Apple may vary I don't know). You now get a new laptop - how do all these passkeys get reset on the new laptop? Cannot be manually.
I guess the same question applies to a password manager - how to link a new device to use existing passkeys.

[Damariobros]

How do you get Bitwarden to take over using passkeys in Windows 10? Whenever I attempt to do anything with passkeys, whether logging in or creating one, WIndows prompts me to insert a security key.

[DavidW-diie]

If a passkey is stored on the device, e.g., my laptop, and I get a new laptop, how does it migrate to the new device? I'm sure it's really simple, but I am not sure. Thanks.

[Chicago]

Is the passkey device Specific? - or if I have a computer and phone will it merge across devices? Also does the passkey eliminate or delete my PASSWORD? AND what if you have 2-3 Google accounts like I do? I have a job gmail, a Google gmail, and another Goog gmail?

[Juan-sqhb]

Will passkeys replace hardware authentication like Yubikey? what are the advantages of each?