setting up passkeys with keepassxc on linux

Since Microsoft was making passkeys the default for authenticating on Azure as mentioned in a previous post, I wanted to understand more about passkeys and how to use them on Linux. This video was helpful - Convenient and secure: Manage passkeys with KeePassXC - Tutorial

So, with keepassxc, the steps were, for me on Linux Mint,

sudo add-apt-repository ppa:phoerious/keepassxc

sudo apt update
sudo apt install keepassxc

Then,

1. Need to enable browser integration

2. Need to connect browser plugin to keepassxc

3. Need to enable passkeys in the browser extension

4. Test with webauthn.io

5. https://passkeys.directory/ shows which services support

For Google account, passkey creation is via my account - myaccount.google.com/security

Under Security, Passkeys and security button at the bottom.

For Microsoft, currently passkey creation is at

https://mysignins.microsoft.com/security-info

Multiple google accounts are supported by keepassxc. Also, Android 16 phone supports passkeys out of the box. 

For Google Workspace logins, the admin must enable passkeys for users - Choose whether to let users skip their password if they can authenticate their Google Account securely with just a passkey. -  the only downside seems to be for people using security keys - "Users won't have the option to add a security key. They can still create passkeys on security keys, but security keys that support passwordless sign-in can't be added for 2-Step Verification only."