VivoKey releases NFC Passkey Bridge

It’s a silly little update, but @tac0s pointed out user expectation might be that they can scan the QR code from inside the app.

It doesn’t do anything but launch the system default camera app, but it fulfills user expectation :slight_smile:

3 Likes

Lol, yup. I think it is obnoxious to open an app to have to close it and open another app to start things when i paid for fhe app.

6 Likes

I’m loving the consistent updates. I’m wondering though if in misunderstanding something from seeing users photos and whatnot. Is this app just for fido2 via QR code on another device such as windows laptop or can this bridge also be as an in os support for authentication since even the latest builds of Android dont support resident key flows on android.

1 Like

Yep you can use it for both QR and local Fido

This I don’t quite understand as I’ve been using Google’s built in support on the phone for years? The advantage to using Passkey Bridge is the pin caching and logging features.

1 Like

Hit the wrong thing and now I can’t change it…

:man_facepalming:t2:

I agree with tac0s!

2 Likes

And here i thought it was not needing to have a reader attached to my computer.

1 Like

Haha no I meant the reason to use bridge over native NFC key support on the phone :slight_smile:

3 Likes

Ah my bad.

1 Like

Ah, maybe there is a misunderstanding. Throughout the web I see that users aren’t able to use NFC based passkeys on android only U2F. I’m reading that USB is supported and NFC is planned but not native to the OS yet. I know that some phone providers have baked in their own support but from everything I see Android doesn’t support it as is.

You can see a discussion from the FIDO alliance here: https://groups.google.com/a/fidoalliance.org/g/fido-dev/c/QFbAJiVxivA

You can also see this in the yubikey android matrix as they state you’d have to use USB only.

I also make a detailed chart have different attempts with and without the bridge using different browsers on my Samsung s23 ultra here: Vivokey Apex Flex Android FIDO2 Issues - #9 by gatsu

I’m curious what model phone and OS you are using to get full passkeys to work on your android? I’m in the market to get a new phone.

1 Like

that’s from 2023-2024 and there was turmoil back then for sure.

Well there are nuances here and when I say “OS” what it really is, is Google Play Services which handles FIDO passkey processing on Android. The OS is critical in directing requests to the correct application but that application is Google Play Services for handling FIDO / Passkey requests.

If I try to create a passkey on my phone using my phone browser on passkeys.io, I get an NFC option for saving the passkey;

1 Like

Also just pushed an update to Google for review that integrates QR code scanning directly in the app vs launching the native camera app. Faster and cleaner experience that should be compatible with all types of android based operating systems.. as long as Google Play Services is installed :slight_smile:

5 Likes

I wish my play store updates got approved that fast. Updated in GrapheneOS and QR scanning shows in app.

3 Likes

Might be because it’s a paid app?

3 Likes

This is my exact same experience but because it never prompts for pin input (at least for me) it never is able to store any resident keys. From my understanding there is no support for resident keys only u2f and the flow you showed screenshots only shows no pin input prompt which from my understanding is u2f. If you look at my tests in the other post there’s lots more details even when using the bridge. so I’m wondering what I’m missing. I’d love to know what OS or brand others are using that actually work with resident keys.

1 Like

Have you set a pin yet? If not, try using the NFC Passkey Manager app and set a pin, then it should work.

I’m using Nothing Phone 2 with NothingOS 3.2 based on Android 15.

1 Like

Yes I do have a pin set. If you check out my post from this thread there is a column in the chart showing when android prompts for a pin or not. You’ll also see in the chart when using something like windows I have zero issues using resident keys with my pin:

Edit: Also, thanks for the phone suggestion it looks interesting! I appreciate it.

2 Likes

For me at least, I still frequently wasn’t offered the NFC option:

Or wasn’t even offered the option to use an external device, it would only accept using the internal passkey chip thingie

But now, with the bridge, it works every time which is huge

Thanks for developing it, it’s very convenient :classic_smile:

2 Likes

I’m seeing similar behavior to @gatsu, both with the Android native NFC device not being available, and with getting passwordless passkey logins showing as success without a PIN being entered or cached.

  • Samsung Galaxy S24
  • Android 16
  • Full Google Play Services
  • VivoKey NFC Passkey Bridge v 1.3.7
    • Enable PIN Caching: disabled/off
  • VivoKey NFC Password Manager v1.1.4

enrollment:

  1. Fresh FIDO2 applet on test card
  2. Set PIN via DT NFC Passkey Manager
  3. Firefox → passkey.io → create a passkey
  4. phone modal → save another way → another device → see and pick “NFC security key”
  5. phone modal “Connect your key” → present card → “just a moment” → “you’re all set!”. Never prompted for a PIN
  6. passkey.io gives the generic error → NFC Passkey Manager shows no passkey

Same flow, but using Chrome, I never see the “NFC security key” option. Only a “USB Security Key”

authentication:

pre-conditions:

  1. Set pin on card
  2. Successfully enroll passkey in passkeys.io via Android + Firefox + DT NFC Bridge

native auth flow:

  1. Firefox → passkey.io → signin with passkey
  2. system modal prompts “already saved passkey” and defaults to the NFC bridge
  3. select more saved sign-ins → passkey on another device → only options are “USB Security Key” or “Use a different phone or tablet”

bridge auth flow

  1. Firefox → passkey.io → signin with passkey
  2. system modal has saved passkey via NFC bridge selected → tap sign in
  3. NFC Bridge modal: Tap for NFC Passkey
  4. NFC Bridge: Success! no prompt for PIN
  5. If on Chrome, nothing else happens, no passkeys.io sign in. If on Firefox, sign in works (even without a PIN).
1 Like

Silly question but

Did you set this when you registered? If not, you’ll only get zeroes.

1 Like

To be clear you’re looking for the native FIDO support option from Google.. NFC Passkey Bridge shows up properly yeah?

1 Like