For the record. I'm not SOLD on passkeys as _the_ solution but there's a lot more right with it than wrong. And passwords are just far too easy for people to screw up. There have been other attempts to replace them in the past and who knows if passkeys will catch on.

[There's a spec for import and export](https://fidoalliance.org/specifications-credential-exchange-specifications/) and a [1Password blog post about it](https://blog.1password.com/fido-alliance-import-export-passkeys-draft-specs/)

If that solves vendor lock-in, then I'm just worried about possible attestation stuff

Not being able to export your passkeys makes you dependent on the password manager.

Is it not possible to migrate between tools? I don't mean that companies aren't implementing this. I mean is it not allowed by the spec.

But again. The people that need this are not you and I. Its people that WILL export their keys in plain text on their desktop...

security

Passkeys are just passwords that require a password manager - Dan Fabulich

Scoresby

> Not being able to export your passkeys makes you dependent on the password manager. 

Is it not possible to migrate between tools? I don't mean that companies aren't implementing this. I mean is it not allowed by the spec.

But again. The people that need this are not you and I. Its people that WILL export their keys in plain text on their desktop...