Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"Passwordless login" via Passkey support for login and decryption #191

Open
tomfitzhenry opened this issue Nov 24, 2024 · 0 comments
Open

Comments

@tomfitzhenry
Copy link

It'd great if etesync supported passwordless login via Passkeys, in the same way that Bitwarden can do, as described in https://bitwarden.com/blog/log-into-bitwarden-with-a-passkey/

The end result would be users could login via either:

  • their master password (as is the status quo)
  • their passkey, which would perform usual FIDO2 auth, but also use the hmac-secret functionality to derive a symmetric key to decrypt the encrypted master password (stored on the server)

The benefit is that passkeys are phishproof (due to mutual auth) and are 1-click login.

Users that prefer to solely use passwords are unimpacted.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant