Pre-purchase question: Nitrokey Passkey, hmac-secret/PRF for Bitwarden

Nitrokeys
1

Hello,

I am considering buying the Nitrokey Passkey (NKPK) and have one specific question beforehand:

Does the Nitrokey Passkey support the FIDO2 hmac-secret extension, so that it can be used via WebAuthn PRF to decrypt a Bitwarden vault? Specifically, I mean Bitwarden’s “Log in with passkey” with the “Use for vault encryption” option enabled (Chromium-based browser, Linux).

Your product page only lists FIDO2/U2F and WebAuthn and does not mention hmac-secret/PRF. Can you confirm that the Passkey supports it, and is there a minimum firmware version required?

I will only buy the key if it can replace entering the master password.

Kind regards,
Louis Bärtschiger

2

Hi Louis, I can confirm that the Nitrokey Passkey implements the hmac-secret extension and thus the WebAuthn PRF extension (in all firmware versions).