I’m a (relatively) long-time user of GrapheneOS. As password manager, I’ve been using KeePassDX for quite a while. I’ve been happy to hear when they introduced passkey support, but for some reason, it never worked for me, and I always shrugged it off.

Today, I encountered a service that uses passkeys again, and I wondered, “wtf, this can’t be”. The browser (Firefox, Vanadium) always showed an error and did nothing.

So, I checked Settings > Passwords, Passkeys and accounts > Preferred service, and indeed it said “KeePassDX”. So I checked KeePassDX settings - nothing said “enable passkey support” in particular. So… I set the preferred service to None, reset it to KeePassDX, and… suddenly, passkeys worked.

Yeah. Whatever. Introducing new features to software can break things, I know this from my own job. No idea if the bug lies in KeePassDX, or GrapheneOS (passkeys were a new feature there as well?). But now, apparently, I could use passkeys.

Aside, personally, I find storing passkeys in a password database no different to storing secure randomly generated ~20 character passwords. But I am no security expert, so don’t count on my opinion.