YubiKey has just implemented support for the Android Credential Manager Provider API. It would be great if Envoy did the same thing for the Passport Prime. You could even take this one step further and use Quantum Link to allow Passkey and Security Key function over Bluetooth using this API.
Hey @Mason.99999
From what I’m reading, the core of this is an Android-level change to make this flow more natively through the system (NFC FIDO2/CTAP2 key rather than being Yubico-specific)
The good news is that Passport Prime already supports both this, so it stands to benefit from this directly. In principle you should be able to tap Prime to an Android phone and have it act as your security key in that more native flow, without us needing to build anything new. We’ll do some testing our side to confirm the experience on current Android versions.
Your QuantumLink idea is still a great shout as a next step. Doing it over Bluetooth would make it tap-free and even smoother, and an Envoy companion integration (similar to the app Yubico shipped alongside this) could polish the experience further. I’ll pass that along to the team as feedback.
Thanks for sharing
Yes, there is some native functionality built in but the usb/nfc function seems to be tied to Google Play services and inconsistent across devices (and with GrapheneOS). Using the Android Credential Manager Provider API directly from Envoy rather than relying on inconsistent usb/nfc communication directly to the OS from Prime would likely be more consistent. Also, it would allow bluetooth which is more convenient.