Confusion for private keys #9
-
In general, I understood that during registration ceremony, Authenticator generates the Pub/Private key pair, stores a private key and provides public key in response. Now my question is, what happens if Authenticator doesn't store the Private key, i.e. supports residential keys = false? Also, does Authenticator generates the pair every time it registers with new website? Can I use same authenticator for same website for multiple usernames? |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
If you request a passkey correctly in the create call, the authenticator will only create a passkey (you can confirm in the credProps response).
Yes, passkeys are unique per RP ID, by design.
Yes. Each passkey is in an authenticator is unique per user account + RP ID combo. |
Beta Was this translation helpful? Give feedback.
If you request a passkey correctly in the create call, the authenticator will only create a passkey (you can confirm in the credProps response).
Yes, passkeys are unique per RP ID, by design.
Yes. Each passkey is in an authenticator is unique per user account + RP ID combo.