keepassxc-browser

Yeah, KeePassXC is pretty basic but is trustworthy and it works. The KeePassXC-Browser extension for Firefox and Chromium-based browsers is useful too: https://github.com/keepassxreboot/keepassxc-browser

A password manager can easily implement passkeys just like it implements passwords. Though last I checked no browser had created an API for extensions to implement the passkey API. KeepassXC's implementation for example has to inject JS into every page to override `window.navigator.credentials` ( https://github.com/keepassxreboot/keepassxc-browser/pull/178... ). It works but is brittle, so a proper way through extension API would be nice.

Sure, but that works for passwords because you can copy-paste them from an external program. The WebAuthn API in question is built around using JS in the website's context to manipulate the passkey. [1] You have to hope that the browser gives a way for an external program to be involved in that JS API's implementation. Looking at KeepassXC's WebAuthn WIP implementation, it works by injecting JS into the website context that overrides the default JS API to its own implementation instead. [2] I don't see any API in the chrome extensions docs [3] that could be used to customize passkeys, so I assume 1Password's passkey implementation (mentioned in other comments in this thread) does the same thing. I sure hope the browsers don't decide to crack down on it by making the API uninterceptable in the name of security. [1]: https://web.dev/passkey

> with good browser plugins This latest version KeePassXC has a whole new browser plugin: https://github.com/keepassxreboot/keepassxc-browser So maybe it has reached that point now? Not that I've tried it, but it's at least promising that they've been working on it.