{"id":46807,"date":"2025-02-21T16:43:25","date_gmt":"2025-02-21T21:43:25","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=46807"},"modified":"2025-02-21T16:43:25","modified_gmt":"2025-02-21T21:43:25","slug":"secrets-4-4-and-passkey-credential-exchange","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2025\/02\/21\/secrets-4-4-and-passkey-credential-exchange\/","title":{"rendered":"Secrets 4.4 and Passkey Credential Exchange"},"content":{"rendered":"<p><a href=\"https:\/\/secrets.app\/blog\/2025\/02\/secrets-credential-exchange\/\">Paulo Andrade<\/a> (<a href=\"https:\/\/mastodon.social\/@pfandrade\/113985690075840345\">Mastodon<\/a>):<\/p>\n<blockquote cite=\"https:\/\/secrets.app\/blog\/2025\/02\/secrets-credential-exchange\/\"><p>One major issue preventing some users from adopting [passkeys] is that neither Apple&rsquo;s Passwords app nor many password managers offer an option to export them, making it harder to switch platforms or password managers.<\/p><p>Secrets, on the other hand, has always allowed users to export any passkeys it stored. However, since no other password manager could import them, this feature was primarily useful for backups rather than migrations.<\/p><p>The good news is that the FIDO Alliance has been working on a <a href=\"https:\/\/fidoalliance.org\/specifications-credential-exchange-specifications\/\">standard<\/a> to address this issue, and Apple has shipped its initial implementation in iOS 18.2 and macOS 15.2.<\/p><p>[&#8230;]<\/p><p>As of this writing, Secrets supports <a href=\"https:\/\/secrets.app\/support\/importing-items\/\">importing items<\/a> exported from <strong>eight different password managers<\/strong>. That requires a lot of code and reverse engineering to handle mostly undocumented file formats.<\/p><p>With this new API, password managers that adopt it will become compatible with each other.<\/p><p>[&#8230;]<\/p><p>Additionally, given the preview nature of this API, Apple still has it behind <a href=\"https:\/\/developer.apple.com\/documentation\/authenticationservices\/ascredentialimportmanager\">developer toggles<\/a>[&#8230;]<\/p><\/blockquote>\n\n<p>See also: <a href=\"https:\/\/tinyapps.org\/blog\/passkeys-touted.html\">Miles Wolbe<\/a>.<\/p>\n\n<p>Previously:<\/p>\n<ul>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2024\/12\/13\/ios-18-2-and-ipados-18-2\/\">iOS 18.2 and iPadOS 18.2<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2024\/12\/12\/macos-15-2\/\">macOS 15.2<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2024\/10\/16\/passkeys-credential-exchange\/\">Passkeys Credential Exchange<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2024\/05\/23\/the-dark-age-of-authentication\/\">The Dark Age of Authentication<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2020\/09\/22\/secrets-remote-keychain\/\">Secrets Remote Keychain<\/a><\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>Paulo Andrade (Mastodon): One major issue preventing some users from adopting [passkeys] is that neither Apple&rsquo;s Passwords app nor many password managers offer an option to export them, making it harder to switch platforms or password managers.Secrets, on the other hand, has always allowed users to export any passkeys it stored. However, since no other [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2025-02-21T21:43:42Z","apple_news_api_id":"b9c8d27e-b048-499d-a919-cab47039ed4d","apple_news_api_modified_at":"2025-02-21T21:43:42Z","apple_news_api_revision":"AAAAAAAAAAD\/\/\/\/\/\/\/\/\/\/w==","apple_news_api_share_url":"https:\/\/apple.news\/AucjSfrBISZ2pGcq0cDntTQ","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[31,2586,26,30,32,2598,2222,1849],"class_list":["post-46807","post","type-post","status-publish","format-standard","hentry","category-technology","tag-ios","tag-ios-18","tag-iosapp","tag-mac","tag-macapp","tag-macos-15-sequoia","tag-passkeys","tag-secrets"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/46807","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=46807"}],"version-history":[{"count":1,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/46807\/revisions"}],"predecessor-version":[{"id":46808,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/46807\/revisions\/46808"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=46807"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=46807"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=46807"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}