Passkey compatibility
This is the one place SafeHanded lists passkey providers by name. Everywhere else the docs just link here, because which providers can unlock changes over time and a single dated list is the only version that stays trustworthy.
Most modern passkey managers can unlock; a few only sign you in. Treat this as guidance, not a promise — click Use to unlock in the app to confirm your own setup.
● Last checked: 21 September 2026
Can unlock (support PRF for a third-party app)
Section titled “Can unlock (support PRF for a third-party app)”This is about a provider returning a PRF value to another app (SafeHanded) — not about it encrypting its own vault.
| Provider | Sign-in | Unlock (PRF) | Notes |
|---|---|---|---|
| Windows Hello | ✓ | ✓ | Recent Windows 11 on Chrome, Edge or Firefox. |
| Apple Touch ID / Face ID (iCloud Keychain) | ✓ | ✓ | Recent macOS or iOS/iPadOS, Safari 18+ (also Chrome/Firefox on macOS). |
| Google Password Manager | ✓ | ✓ | On Android, in Chrome, Edge or Samsung Internet. |
| 1Password | ✓ | ✓ | Across platforms. |
| Hardware security keys | ✓ | ✓ | YubiKey and other CTAP2 keys with hmac-secret, when PRF was requested at registration. |
| Proton Pass, Enpass, Keeper, Samsung Pass, KeePassDX | ✓ | ✓ | Reported working (Keeper on Chromium; Samsung Pass / KeePassDX on Android). |
Sign-in only (may not unlock)
Section titled “Sign-in only (may not unlock)”These log you in fine, but can’t be relied on to unlock your key:
| Provider | Sign-in | Unlock (PRF) | Notes |
|---|---|---|---|
| Bitwarden | ✓ | partial | Platform-dependent and inconsistent for third-party unlocking. Don’t rely on it to unlock. |
| Dashlane | ✓ | ✗ | Uses PRF only for its own vault; returns nothing to other apps. |
| NordPass | ✓ | ✗ | Reports PRF unavailable. |
| KeePassXC | ✓ | partial | Inconsistent. |
| Microsoft Password Manager | ✓ | partial | May return PRF when created but fail when used to unlock. |
Known limitations
Section titled “Known limitations”- Older macOS: passkeys need macOS Ventura (13) or newer; earlier versions can’t create a passkey at all. Using a passkey to unlock via PRF needs Safari 18. On such a Mac, reveal with a hardware security key, or use a device that supports passkeys.
- iPhone/iPad: Safari doesn’t pass PRF to a plugged-in or roaming security key, so a YubiKey can’t unlock there even though it supports PRF elsewhere.
- Old passkeys: a passkey created before its provider supported PRF may need to be removed and re-registered to become unlock-capable.
If your only passkey can’t unlock
Section titled “If your only passkey can’t unlock”You can still reveal on a device where that passkey works: your recovery code unlocks your key, and the passkey handles the reveal confirmation. What you can’t do is reveal on a device with no usable passkey or security key at all. For one-touch unlock, use one of the providers in the first table.
Spotted something out of date? Tell support.