







Passkeys.directory
A community-driven index of websites, apps, and services that offer signing in with passkeys.

Please, please, please stop using passkeys for encrypting user data
Passkeys are the future of authentication, but using them for data encryption is a disaster waiting to happen. Overloading these credentials creates a dangerous blast radius that can lead to the irreversible loss of a user's most sacred memories and documents.

Coming to Apple OSes: A seamless, secure way to import and export passkeys
Apple OSes will soon transfer passkeys seamlessly and securely across platforms.

plc-passkey · Passkeys as PLC Rotation Keys
Derive deterministic secp256k1 rotation keys from passkeys via WebAuthn PRF and add them to AT Protocol did:plc documents.

Open-sourcing Keyhive, filtering Ambsheets, and Sketchpad explorations
Some updates from our ongoing work on local-first auth, a new post from our Ambsheets project about filtering scenarios in a spreadsheet, and some explorations of the historic Sketchpad project for constraint-based drawing.

Unkey's Globally Distributed API key generation - with cofounder James Perkins
Karpathy's LLM Wiki: The Complete Guide to His Idea File
Karpathy's follow-up gist went viral. Complete breakdown with implementation examples.

Open Source Password Manager for Teams | Passbolt
Manage and share passwords securely with Passbolt. Open source, audited and built for teams that need collaboration, compliance and control.

Best Password Manager for Business, Enterprise & Personal | Bitwarden
Bitwarden is the most trusted password manager for passwords and passkeys at home or at work, on any browser or device. Start with a free trial.

AChep/keyguard-app
A password manager that supports Bitwarden platform and KeePass (KDBX) files. It autofills your logins, supports passkeys, works offline, and runs a Watchtower that finds leaked and reused passwords and other issues.
Keyhive: Local-first access control
Keyhive is a project exploring local-first access control. It aims to provide a firm basis for secure collaboration, similar to the guarantees of private chat but for any local-first application.

Replace SecurityKey with Passkey #240
EDIT: switched to a different approach, keeping SecurityKey but dropping the browser hint. This still triggers 1P for me, if the yubikey behavior is unaffected then we should be good? This replaces the existing SecurityKey-based implementation with the newer Passkey one. This is a drop in replacement that means that we properly hook into external password managers like 1P, while still supporting the built in OSX support. SecurityKey is literally meant for "hardware as a token" auth, while Passkey is the newer password-replacement standard. Browsers interpret SecurityKey as "time to show the insert your hardware key dialog", and would ignore passkeys in password managers. No migrations required, this is fully backwards compatible. There are no tests related to this in the codebase, but if you want I can add some! I have verified this works E2E running the app locally with `just run-dev` ([screenshot](https://johanna.wisp.place/tranquil-pds-passkey.png)) Closes https://tangled.org/tranquil.farm/tranquil-pds/issues/100
Cirrus PDS now support passkey auth. It was a bit of a puzzle adding it to a tool where where the admin is all CLI, but I'm really pleased with the flow I came up with. Give it a go! github.com/ascorbic/cirrus If you don't know what Cirrus is, it's a really easy way to host your own Bluesky data
Published part two on wiring up Standard.Site as a test of said wiring, in my hubris, and: no dice. Looks like discussion around arbitrary `rkey` values is still in flux — my “slugified post path” rkeys no longer validate, and I get no fancy preview for documents with an `rkey` > 13 characters.
Is TID the best choice for rkeys? #7
tangled.orgCirrus PDS now support passkey auth. It was a bit of a puzzle adding it to a tool where where the admin is all CLI, but I'm really pleased with the flow I came up with. Give it a go! github.com/ascorbic/cirrus If you don't know what Cirrus is, it's a really easy way to host your own Bluesky data