I have read most of the documents about passkeys but it is not clear whether using them requires another piece of FIDO certified hardware or software.
iMac Pro, macOS 15.5
Don't confuse passkeys with security keys:
About Security Keys for Apple Account - Apple Support
About the security of passkeys - Apple Support
Depending upon your hardware, passkeys may be a nuisance. They are more secure but apparently require a form of biometric identification such as Touch ID or FaceID. I have a standard third party keyboard and a Mac Mini (no webcam) and there's no biometric options here. I could use an iPhone to do that but typically I never have my iPhone in the same room, plus it was only recently I upgraded iPhone to one with Touch ID (no FaceID).
Sign in to an account on your Mac with a passkey - Apple Support
Don't confuse passkeys with security keys:
About Security Keys for Apple Account - Apple Support
About the security of passkeys - Apple Support
Depending upon your hardware, passkeys may be a nuisance. They are more secure but apparently require a form of biometric identification such as Touch ID or FaceID. I have a standard third party keyboard and a Mac Mini (no webcam) and there's no biometric options here. I could use an iPhone to do that but typically I never have my iPhone in the same room, plus it was only recently I upgraded iPhone to one with Touch ID (no FaceID).
Sign in to an account on your Mac with a passkey - Apple Support
Passkeys do not use hardware encryption. When set up, they create a public key for the account that is shared with the account provider (Google, Home Depot, whatever) and a private key that is stored locally (or, if enabled, in iCloud and accessible by any device signed to that Apple ID). You unlock the private key with your biometric access (Touch ID, Face ID, Apple Watch) to the device.
Limnos wrote:
They are more secure but apparently require a form of biometric identification such as Touch ID or FaceID. I have a standard third party keyboard and a Mac Mini (no webcam) and there's no biometric options here.
Correct. Their utility depends on your access to biometric logins. I bought my Apple Watch early in COVID, when Face ID was new but not able to work with a mask on and the Apple Watch was a great workaround. Today, I find the whole ecosystem very convenient – I get up, put on my watch and then unlock my iPhone with Face ID, that unlocks my watch and I that logs me into my Macs all day without a password or fingerprint, and when biometrics are required a double-tap on my watch handles it.
Does the use of passkeys require another piece of software (not necessarily Apple software)?
