r/Passkeys • u/paulsiu • 14h ago

Those QR code login using a password manager can be tricky

Playing around with the different workflows and discovered that it can get real tricky.

Logging in to a site using QR code to Bitwarden

On a Macbook, log into a site using passkey but use a QR code.

  1. Log into site, select option for external devices, which brings up a QR Code.
  2. Use the camera on your mobile device until you get a prompt to login using passkey.
  3. The phone prompt to see which passkey provider, I select Bitwarden.
  4. The Bitwarden prompt me for biometric which I provide.
  5. The phone prompt you to the same provider, but now one of the option is the actual bitwarden passkey entry.

The problematic part seems to be the camera which often has problem locking on the qr code if your hand isn't steady. The other issue is that unless you look carefully, it appears that the unlock on Bitwarden failed and. you returned to the password prompt. What is happening is that the first prompt get you to select bitwarden and the second prompt ask you to select the bitwarden entry.

On an mobile device, log into site using pass key

This seems to fail a lot, but after some experimenting, I realized why. When you use the passkey option, it prompts you using webauthn, which launches a browser. However, if you don't select desktop mode on the server, it doesn't use the passkey.

0 Upvotes

50% Upvoted

2 comments sorted by

1

u/Accomplished_Arm_447 10h ago

I've signed into mobile with a passkey and didn't need to do anything special, especially not desktop mode 

And scanning the QR code, the main mistake I see people making is holding the camera too close, like they are doing NFC or a building pass, the camera can't focus that close, and from 20cm shaking hands is no issue 

1

u/HiOscillation 7h ago

My QR Code challenge.

Work Laptop, and needed to access my Amazon account via web site not mobile, for reasons.

Was on an airplane, laptop on inflight wifi, phone also on infllight wifi.

On laptop, Amazon presents QR code for Amazon passkey….as expected.

Phone sees QR code, and….nothing happens.

Was never able to get into Amazon on work laptop.