Wo Passkey Mfiri Nyinaa Ayera (iCloud Keychain / Google Password Manager / YubiKey): Akontaabu a Wobɛsan Ayɛ a Wonni Password¶

Sɛ wohwere wo smartphone ne laptop bere koro mu - sɛ́ ɛyɛ korɔnbɔ, nneɛma a wowia wɔ amannɔne, ofie ogya, nsuyiri, anaasɛ hardware a entumi nyɛ adwuma bere koro mu - kanyan nnɛyi lockout a ɛyɛ hu: the Circular Passkey Dependency Trap. Sɛ wobɔ mmɔden sɛ wobɛkɔ kɔmputa foforo koraa anaa fon foforo mu na ama woanya wo nkwa bio a, login screen no hwehwɛ sɛ "Fa passkey di dwuma wɔ wo fon so anaa fa wo camera scan QR code yi" (Cross-Device Authentication / . CTAP 2.2 Hybrid Transport). Efisɛ telefon a na ɛkura wo passkeys (iCloud Keychain / Apple Passwords, . Google Password Manager, . 1Password, . Bitwarden, anaa Windows Hello). Mma wo ho nnyɛ wo hu: gye sɛ woahwere Apple Recovery Key a ɛwɔ nkyerɛwde 28 a wɔahyɛ da ayɛ NE mfiri biara a wogye di, anaasɛ woakyerɛw wo din wɔ Hardware Security Key a ɛyɛ katee a ɛnyɛ nea ɛsan kɔ akyi (YubiKey) program na ayera honam fam safoa a wɔakyerɛw din nyinaa, wo synced passkeys no NNI lock wɔ fon a ayera no honam fam silicon no mu. Cloud-synced passkeys (multi-device credentials wɔ FIDO2 / WebAuthn nkyerɛkyerɛmu no ase) no, wɔde asie wɔ awiei-kɔ-awie encrypted cloud vault (iCloud Keychain Escrow anaasɛ Google Password Manager Security Domain) a wobetumi abue wɔ afiri foforo koraa a wɔde besi ananmu so denam wo fon dedaw no lock-screen passcode/PIN + SIM/eSIM cellular nɔma a wɔde besi ananmu so. Sɛ wopɛ authenticator app TOTP lockouts a, nso hwɛ MFA lockout ne authenticator a wɔsan nya; sɛ wo telefon nɔma no san de wo telefon nɔma dii dwuma bere a na wɔato wo mu a, hwɛ telefon nɔma a ɛwɔ nneɛma abien a ɛma wogye di a carrier asan de adi dwuma bio; anaasɛ sɛ wo werɛ afi wo master password a wode kɔ third-party vault a, hwɛ password manager lockout ne vault a wɔsan nya. Sɛ wowiaa wo mfiri ahorow no ara kwa wɔ adwowtwa a basabasayɛ wom anaa ofie ntua mu a, frɛ wo mpɔtam hɔ nɔma a egye ntɛmpɛ (911 wɔ United States ne Canada no, . 112 wɔ Europa Aman Nkabom no nyinaa mu, . 999 wɔ United Kingdom) fi obi a ɔhwɛ no telefon so anaa hwɛ yɛn wiase nyinaa kyerɛwtohɔ a ɛfa nɔma ahorow a egye ntɛmpɛ.

Yɛ eyi mprempren¶

1. Ansa na biribi foforo biara bɛba no, te nea enti a wuntumi nsan mfa Apple iCloud Passkey nkɔ Windows PC nkutoo so (anaasɛ Google Passkey nkɔ browser a ɛnyɛ Chrome so a wo fon nni mu):
2. Sɛ wo klik "Sign in with a passkey" wɔ Windows PC so na ɛda QR code bi adi a ɛkyerɛ wo sɛ fa wo iPhone scan no (FIDO Cross-Device Authentication / caBLE), saa QR koodu no hwehwɛ sɛ wode Bluetooth + intanɛt nsa a ɛte ase a ɛwɔ honam fam iPhone/iPad/Mac a wɔabue wo iCloud Keychain dedaw.
3. WONTUMI ntwe wo iCloud Keychain passkeys no tẽẽ nkɔ Windows browser a egyina hɔ ma nea enni Apple mfiri (gye sɛ wowɔ iCloud for Windows a wɔadi kan agye atom dedaw). Sɛ wopɛ sɛ wosan nya iCloud-synced passkeys bere a wo iPhone ayera a, ɛsɛ sɛ woyɛ:
   • (A) Di kan nantew kɔ mobile carrier store mu, fa SIM a wɔde besi ananmu anaa eSIM a wo fon nɔma wɔ iPhone a wɔde besi ananmu/wɔafɛm (anaa iPad/Mac) so no yɛ adwuma, fa SMS code a wɔde kɔmaa saa SIM a wɔde besi ananmu no kɔ wo Apple Akontaabu no mu, na hyɛ wo iPhone dedaw no 6-digit lock-screen passcode no mu na fa decrypt iCloud Keychain ANAASƐ
   • (B) Wɔ wɛbsaet a worebɔ mmɔden sɛ wobɛduru so (te sɛ Amazon, . PayPal, . GitHub, . Best Buy, . eBay, anaa Microsoft), klik "Sɔ ɔkwan foforo hwɛ" / "Sign wɔ ɔkwan foforo so" / "Wowɔ ɔhaw wɔ Sign in mu?" ase Passkey prompt no ase na san hwe ase kɔ wo Password + SMS / Email / Backup Code.
4. Nantew kɔ adwumakuw bi aguadidan bi mu a wo mobile carrier (Verizon, . AT&T, . T-Mobile, . EE, . Vodafone, . O2, . Rogers, . Bell, . Telstra) ne wo honam fam aban mfonini ID na woanya SIM kaad anaa eSIM a wode besi ananmu FIRST:
5. Ɛkame ayɛ sɛ ntini biara a ɔde ma (Apple iCloud, . Google Account, . Microsoft Account, . Samsung Account) de wo cellular phone nɔma a wogye di di dwuma sɛ bootstrap factor titiriw bere a honam fam mfiri nyinaa ayera. Sɛ wunya honam fam SIM kaad a wode besi ananmu (a wubetumi de akɔ $30 mfitiase telefon a wɔantoto mu anaa w’adamfo bi fon a aka mu) a, ɛbubu kurukuruwa a wɔatoto mu no wɔ simma 10 mu denam ma a ɛma wunya SMS/nne sanba koodu a ehia na wode akɔ wo ntini mununkum akontaabu mu no so.
6. Kae wo MISSING fon no 4-digit anaa 6-digit Lock-Screen Passcode / PIN / Pattern - ɛyɛ cryptographic decryption key ma wo synced passkeys:
7. Nnipa baanu no nyinaa Apple (iCloud Keychain Escrow) ne Google (Google Password Manager End-to-End Encryption) encrypt wo synced passkeys wɔ cloud no mu sɛnea ɛbɛyɛ a Apple anaa Google rentumi nkenkan. Sɛ wokɔ fon foforo koraa mu bere a woahwere mfiri dedaw nyinaa akyi a, Apple anaa Google bebisa sɛ: "Hyɛ wo [iPhone / Pixel / Galaxy] a ayera no kan passcode / screen lock PIN no na fa wo password ne passkeys a woakora so no san ba." Do n guess wildly: you typically have 10 attempts before the Hardware Security Module (HSM) escrow vault sɛe ne ho daa na amma wɔasiw brute-forcing ano.
8. Hwɛ sɛ tablet dedaw biara, drawer fon dedaw biara, adwuma laptop, anaa abusua muni browser da so ara wɔ active logged-in session:
9. Ansa na wubefi ase ayɛ Automated Account Recovery a ɛyɛ brɛoo nnafua 3 kosi 14 (iforgot.apple.com anaasɛ accounts.google.com/signin/recovery), hwɛ iPad dedaw biara, Android fon dedaw biara a ɛwɔ desk drawer, ofie desktop PC, anaa Chrome/Edge profile mu wɔ adwumam. Sɛ afiri biako mpo da so ara hyɛ wo Apple, Google, Microsoft, anaa 1Password akontaabu mu a, wubetumi apene afiri foforo no a wobɛkɔ mu no so wɔ sikani 5 mu a wontwɛn nna.
10. Sɛ wowiaa wo iPhone anaa Android (wɔanyera wɔ ogya mu a), hyɛ no agyirae sɛ "Ayera" (Lost Mode), MMA KLIK "Yi Fi Akontaabu mu" DA:
11. Wɔ icloud.com/find (a ɛyɛ adwuma a 2FA nni mu kɛkɛ de hyɛ mfiri bi agyirae sɛ Ayera) anaasɛ google.com/android/find, ma Lost Mode / Lock Device nyɛ adwuma sɛnea ɛbɛyɛ a owifo no ntumi mfa wo passkeys nni dwuma. NKLIKI "Yi Mfiri Yi" mfi wo akontaabu mu bere a ɛwɔ owifo no nsam, efisɛ sɛ woyi fi hɔ a, edum Activation Lock (Find My), a ɛma owifo no popa telefon no na ɔsan tɔn bio.
12. Sɛ wosan nya kwan kɔ wo root account no so pɛ a, twa Device-Bound Passkeys biara mu (Windows Hello, . Mac Touch ID, anaasɛ ayera YubiKeys) a wɔde asie wɔ hardware a ayera no so:
13. Bere a wo cloud account ne lock screen abɔ Synced Passkeys ho ban no, Device-Bound Passkeys te laptop a wowiae no mu TPM 2.0 chip anaasɛ wɔawia YubiKey. Kɔ akontaabu biara de Security -> Passkeys settings page na popa passkey a wɔde laptop a wowiae anaa YubiKey a ayera no din ato so no.

--- .

Gyinaesi dua: ɛpae fi kurukuruwa passkey lockout no mu bere a mfiri nyinaa ayera¶

Di gyinaesi dua yi akyi a egyina baabi a wɔde wo passkeys siee (Apple iCloud Keychain, . Google Password Manager, . 1Password / Bitwarden, anaa Hardware Security Keys) sɛnea ɛbɛyɛ a wobɛsan anya wo akontaabu ahorow no wɔ nhyehyɛe a ɛfata mu:

flowchart TD
    Start["Passkey Mfiri (Telefon, Laptop, anaa YubiKey) Nyinaa Ayera, Woawia, anaa Wɔasɛe"] --> WhereStored{"Ɛhe na Na Wɔde Wo Passkeys Siesie?"}

    WhereStored -->|"1. Apple iCloud Keychain / Apple Nsɛmfua Ahorow App (iPhone / iPad / Mac) ."| ApplePath["ANAMMƆN 1A: Kɔ Carrier Store a wowɔ Photo ID -> Nya SIM / eSIM a Wobɛsesa ama Wo Phone Number"]

    WhereStored -->|"2. Google Password Manager (Android Phone / Chrome Nsɛm a Wɔde Di Dwuma) ."| GooglePath["ANAMMƆN 1B: Nya SIM a Wobɛsesa ANAA Fa Recovery Email Di Dwuma -> Kɔ Google so wɔ Phone / Chrome a Wobɛsesa So"]

    WhereStored -->|"3. Nnipa a Wɔto so Abiɛsa Sikakorabea (1Asɛmfua, Bitwarden, Dashlane, Proton Asɛmfua) ."| VaultPath["ANAMMƆN 1C: Kɔ Vault mu wɔ Device Biara so Fa Master Password + Secret Key / 2FA Recovery Code Di Dwuma"]

    WhereStored -->|"4. Hardware-Bound Nkutoo (YubiKey ayera / Windows Hello Laptop TPM ayera) ."| HardwarePath["ANAMMƆN 1D: Hardware-Bound Passkeys NE Sync to the Cloud DA -> Ɛsɛ sɛ wode Akontaabu Fallback Ɔkwan Di Dwuma"]

    ApplePath --> BorrowApple{"So Wowɔ iPhone, iPad, anaa Mac a Wobɛsesa/Woafɛm a Ɛwɔ Hɔ Mprempren?"}
    BorrowApple -->|"Yiw"| DecryptiCloud["Fa Apple ID Password + SMS kɔ SIM a Wobɛsesa -> Hyehyɛ OLD iPhone no 6-Digit Lock-Screen Passcode -> Synced Passkeys Nyinaa Twe Ntɛm ara"]
    BorrowApple -->|"Dabi: Nya Windows / Linux PC nkutoo"| BypassWebAuthn["On Target Websites, Click 'Try Another Way' Below Passkey Prompt -> Use Password + SMS to Replacement SIM (or Buy/Borrow Cheap Used iPhone/iPad)"]

    GooglePath --> DecryptGPM["Google Prompts: 'Hyɛ wo Android Screen Lock PIN / Pattern Dedaw (anaasɛ Google Password Manager PIN a ɛwɔ Digit 6)' -> Passkeys a Wɔahyehyɛ no Nyinaa Bue Ntɛm ara"]

    VaultPath --> VaultUnlock["Vault Extension / App Twe Passkeys a Wɔayɛ no Synced Nyinaa Kɔ Device Foforo so Ntɛm ara"]

    HardwarePath --> FallbackAuth["Klik 'Sɔ Ɔkwan Foforo hwɛ' wɔ Login Screen -> Fa Backup YubiKey, 8-Digit Backup Codes, Authenticator App, SMS, anaa Identity Verification di dwuma"]

    DecryptiCloud --> AuditRevoke["ANAMMƆN A ETWAE: Twa Mfiri Nhyiam a Woawia no mu & Popa Mfiri a Wɔakyekyere Passkeys wɔ Hardware a Ayera so"]
    BypassWebAuthn --> AuditRevoke
    DecryptGPM --> AuditRevoke
    VaultUnlock --> AuditRevoke
    FallbackAuth --> AuditRevoke

--- .

Ɔfã 1: Passkeys a Wɔayɛ no Synced (Multi-Device) vs. Hardware-Bound Passkeys (Single-Device) .¶

1 fibea a ɛma adwene tu fra wɔ mfiri-a ɛyera ntɛmpɛ mu ne sɛ wunnim sɛ ebia passkey pɔtee bi yɛ Cloud-Synced (Discoverable Multi-Device Credential) anaa Mfiri a Wɔde Hyehyɛ (Single-Device Credential) na ɛyɛ. Hwɛ saa pon yi na hu ntɛm ara sɛ passkeys a ɛbɛsan aba bio bere a woasan anya wo cloud vault no ne nea ewui wɔ hardware a ayera no ho:¶

--- .

Ɔfã 2: Anamɔn-anamɔn a Wobɛsan Ayɛ Bere a Wo iPhone (ne Mac/iPad) Nyinaa Ayera Anaasɛ Woawia¶

Fa no sɛ wowiaa wo iPhone ne MacBook nyinaa fii ahɔhodan dan mu (anaasɛ ogya sɛee no), na wɛbsaet biara a wobɛbɔ mmɔden sɛ wobɛkɔ mu no bisa wo sɛ "Fa passkey a efi wo iPhone mu kɔ mu." Di nnidiso nnidiso pɛpɛɛpɛ yi akyi na woabubu loop no:

Anamɔn 1: San Fa Wo Cellular Phone Number no gu SIM anaa eSIM a Wobɛsesa so¶

Dɛn nti na wo fon nɔma yɛ safoa titiriw a ɛbɛma Apple Account asan anya? Efisɛ bere a wo Apple "Trusted Devices" nyinaa (iPhone, . iPad, . Mac) no ayera, Apple nneɛma abien a ɛma wogye tom no san hwe ase ara kwa sɛ ɛde SMS a ɛwɔ digit 6 anaa nne frɛ a ɛyɛ adwuma ankasa bɛmena wo Trusted Phone Number. 1. Nantew kɔ sotɔɔ bi a aban mpanyimfo tɔn mu ma wo mobile carrier (Verizon, . AT&T, . T-Mobile, . Vodafone, . EE, . Rogers, . Telstra, ne nea ɛkeka ho) ne wo Passport anaa Driver's License. 2. Bisa ananmusifoɔ no sɛ ɔmma fon a wɔawia no SIM/eSIM no nyɛ adwuma (IMEI blacklist sɛ wɔwia a) na fa honam fam SIM kaad a wɔde besi ananmu (anaasɛ fa eSIM yɛ adwuma wɔ fon a wɔde besi ananmu so). 3. Fa saa SIM kaad a wode besi ananmu no gu fon biara a ɛyɛ adwuma mu (flip a ɛyɛ $20 anaa smartphone a woafɛm mpo) sɛnea ɛbɛyɛ a wubetumi anya SMS nsɛm a ɛba ne telefon so frɛ a wɔde akɔ wo nɔma so.

Anamɔn 2: Kɔ Wo Apple Akontaabu mu na Decrypt iCloud Keychain¶

Sɛ wutumi nya SMS nsɛm wɔ wo fon nɔma so pɛ a, wowɔ akwan abien a egyina sɛ ebia wowɔ Apple mfiri bi so:

Ɔkwan A: Wotɔɔ, wofɛm, anaa wowɔ iPhone, iPad, anaa Mac a wode besi ananmu¶

1. Bere a wɔrehyehyɛ mfiri no (anaasɛ wɔ Settings -> Sign in to your iPhone), kyerɛw wo Apple Akontaabu email ne wo password.
2. Sɛ wobisa wo sɛ fa 6-digit verification code "wɔde akɔ wo mfiri afoforo so," pia "Wannya verification code?" -> "Text code kɔ [wo fon nɔma]".
3. Hyehyɛ SMS koodu a ɛwɔ digit 6 a woanya wɔ wo SIM a wode besi ananmu no so.
4. Nea Ɛho Hia iCloud Keychain Escrow Ntɛm: Afei, iOS/macOS bebisa sɛ: "Hyɛ wo iPhone foforo no passcode '[Name's iPhone]'. Wo passcode no yɛ encrypted na Apple ntumi nkenkan. Wɔde di dwuma de nya wo passwords a woakora so ne data afoforo a ɛho hia wɔ iCloud mu."
5. Type lock-screen passcode a ɛyɛ digit 4 anaa digit 6 pɛpɛɛpɛ a wode dii dwuma wɔ iPhone a ayera/wɔawia no so.
6. Wɔ sikɔne 30 mu no, Apple hardware ahobammɔ module (HSM) hwɛ wo passcode no mu, gyae wo iCloud Keychain decryption key, na **twe wo Passkeys, Passwords, ne 2FA Verification Codes a wɔasisi no ɔha biara mu nkyem 100 kɔ Passwords app a ɛwɔ Apple mfiri foforo no so. Wo ho atɔ wo koraa.

Ɔkwan B: Wo NNI Apple mfiri mprempren (Wowɔ Windows anaa Linux PC anaa Android fon nkutoo) .¶

Na sɛ woretu kwan akɔ amannɔne, wowiaa wo iPhone, na wowɔ Windows laptop anaa Android fon nkutoo nso ɛ? 1. Te anohyeto no ase: Worentumi natively sync wo full iCloud Keychain passkey vault kɔ Android fon anaa Linux PC a enni Apple mfiri so. 2. Sɛnea wobɛkɔ wo akontaabu mu (Google, . Amazon, . PayPal, . GitHub, . Bank) fi Windows/Android mprempren a wo iPhone passkey nni mu: - Ɛkame ayɛ sɛ adetɔfo wɛbsaet biara nni hɔ a ɛpopa wo password anaa fallback akwan bere a woreyɛ passkey no. - Sɛ wɛbsaet no pue Windows Security / QR code dialog a ɛka kyerɛ wo sɛ "Fa passkey a efi iPhone anaa iPad so di dwuma," klik Cancel wɔ Windows popup no so, afei hwɛ wɛbsaet krataafa login kratasin no tẽẽ na klik "Sɔ ɔkwan foforo so hwɛ" / "Sign wɔ ɔkwan foforo so" / "Fa password di dwuma mmom". - Hyehyɛ wo akonta password (anaasɛ klik "Forgot password?" na fa email/SMS so san hyehyɛ), na sɛ wobisa wo sɛ fa 2FA a, paw SMS Text / Voice Call (a ɛba wo SIM card a wode besi ananmu no so) anaa Email verification.

Step 3: What if you also forgot your Apple Account password OR lost your phone number (iforgot.apple.com)?¶

• If you pre-configured an Apple "Account Recovery Contact" (Settings -> Sign-In & Security -> Account Recovery): Call your family member or friend who is your Recovery Contact. Have them open Settings -> [Their Name] -> Sign-In & Security -> Account Recovery -> [Your Name] -> Get Recovery Code on their iPhone and read you the 6-digit Recovery Code. Enter that code on your new device to bypass the waiting period and regain instant access.
• If you did NOT set a Recovery Contact: Kɔ ** .https://iforgot.apple.com** to start Automated Account Recovery. After verifying whatever credit card digits or phone number details you know, Apple initiates a mandatory automated security waiting period (typically 24 hours to 14 days).
• CRITICAL WARNING DURING THE iforgot.apple.com WAITING PERIOD: If you still have any device where the lost Apple Account might temporarily reconnect, turn it off, and do not repeatedly submit new requests on iforgot.apple.com, as restarting the form resets the countdown timer back to Day 1. Check your countdown status at iforgot.apple.com.

--- .

Phase 3: Step-by-Step Recovery When Your Android Phone (Google Password Manager) Is Lost or Stolen¶

If your passkeys were saved in Google Password Manager on a lost or broken Android phone (Google Pixel, . Samsung Galaxy, . Motorola, . OnePlus), Google's recent architecture makes cross-platform recovery much easier than it used to be:

Step 1: Sign Back Into Your Google Account on a Replacement Phone or Desktop Chrome Browser¶

1. On a replacement Android phone (or inside Google Chrome on any Windows, Mac, or Linux computer), go to accounts.google.com.
2. When Google prompts you to "Use your passkey to confirm it's really you" (referencing your missing Android phone), do NOT click Continue on the passkey prompt. Instead, click "Try another way" at the bottom-left of the login card.
3. Select one of your fallback authentication options:
4. Get a verification code at [Your Phone Number] (using your replacement SIM card from the carrier store), OR
5. Enter one of your 8-digit Backup Codes, OR
6. Get a verification code at your Recovery Email address (recovery-email@example.com), OR
7. Enter your Google Account Password.

Step 2: Unlock Google Password Manager's End-to-End Encrypted Passkey Vault¶

Once you are signed into your Google Account on the new Android phone or inside desktop Google Chrome (chrome://password-manager/passwords): 1. Try to use or view any saved passkey. 2. Google will display a security prompt: "To use your passkeys on this device, verify it's you. Enter your Google Password Manager PIN (or the screen lock for your old [Pixel / Galaxy] device)." 3. Enter either: - The 6-digit Google Password Manager PIN you created when you first set up desktop passkey sync, OR - The exact Screen Lock PIN, Pattern, or Password of your lost Android phone. 4. The moment you enter that PIN/Pattern, Google's zero-knowledge Titan cloud vault decrypts your passkeys locally on the new device - even if you are on a Windows or Mac computer running Chrome.

--- .

Phase 4: How to Break Out of Individual Website Passkey Loops (Amazon, . GitHub, . Microsoft, . PayPal, . Coinbase, . Sony) .¶

Many websites designed their "Passwordless / Passkey" login screens poorly: as soon as you type your email address, the site automatically fires the browser's navigator.credentials.get() WebAuthn API, popping up a modal operating-system box asking for a Bluetooth phone or USB security key before you even see a password field.

Here is the exact trick to bypass the automatic WebAuthn modal on any website:

1. Press Escape (Esc) or click Cancel on the Operating System / Browser Passkey Popup FIRST:
2. Do not close the browser tab. When Windows Security, macOS, Chrome, or Safari pops up the system dialog saying "Insert your security key" or "Scan this QR code with your phone," click Cancel inside that popup.
3. When the browser's navigator.credentials.get() promise returns NotAllowedError (user canceled), well-written websites (Google, . Microsoft, . GitHub, . PayPal, . Amazon, . Shopify, . Kayak, . eBay) immediately catch that error and reveal the hidden link: "Sign in another way", ** ."Use your password instead"**, or "Send a code to my email/phone" na ɛyɛ.
4. Specific Website Escape Hatches:
5. Microsoft Account (live.com / . outlook.com / . xbox.com): Klik so Cancel wɔ passkey asɛm no so -> klik ** .Other ways to sign in** -> paw Fa me password di dwuma, Fa koodu bi kɔ me recovery email, anaa Hyɛ recovery code a ɛwɔ nkyerɛwde 25. (Twɛn: So woama Microsoft "Passwordless Account" toggle baabi a wɔapopa wo password koraa afi wo account no mu no yɛɛ adwuma pefee? Wɔ Microsoft Account a enni Password so mpo no, klik Other ways to sign in ma wo kwan ma wofa wo Microsoft Authenticator mununkum backup, Recovery Email, SMS, anaa 25-nkyerɛwde Recovery Code so di adanse.)
6. GitHub (github.com/login): Wɔ "Sign in with a passkey" button no ase no, kyerɛw wo username ne password wɔ atifi hɔ, anaa sɛ wobisa wo sɛ 2FA/WebAuthn bere a woakyerɛw wo password awie a, klik ** .More options -> Use your authenticator app anaasɛ Enter a recovery code** na ɛyɛ.
7. Coinbase / Kraken / Binance (Bere a passkeys ne YubiKeys nyinaa ayera): Cryptocurrency exchanges a wɔahyɛ ho mmara no ɛnyɛ kwan ma SMS fallback a ahobammɔ nnim sɛ wokyerɛw passkey anaa YubiKey din a. Klik ** so.Try another way -> I lost my passkey / security key** sɛ wode nsakrae no ID + Live Video Selfie Biometric Verification (2FA Reset), a ɛsesa wo passkey a ayera no bere a woayɛ ahobammɔ dɔnhwerew 24 kosi 48 a ɛyɛ ahyɛde akyi.
8. Discord: Sɛ wo ma Passkey / Security Key MFA yɛ adwuma wɔ Discord so na wohwere wo fon/YubiKey a, klik ** .Authenticate with a backup code** (a ɛyɛ 8-digit code a efi... discord_backup_codes.txt), anaasɛ sɛ woda so ara wɔ SMS Fallback a wɔahyɛ no den wɔ Discord mu a, klik ** .Receive a code via SMS** na ɛyɛ.

--- .

Phase 5: "Fireproof & Theft-Proof" Passkey Architecture a Wɔbɛkyekye (Enti Worentumi Nto Wo Mu Bio Da)¶

Sɛ wosan nya wo akontaabu no wie a, fa simma 20 hyehyɛ saa 3-pillar passkey redundancy rule a FIDO Alliance ne NIST kamfo kyerɛ yi:

• Mmara 1 - Mfa wo ho nto ecosystem biako passkey vault so da; fa cross-platform passkey sie wɔ mu 1Password anaasɛ Bitwarden (anaasɛ kyerɛw mununkum ahorow 2): Wɔ wo akontaabu ahorow 5 a ɛho hia sen biara no so (Google, . Apple, . Microsoft, . Password Manager, . Primary Bank), kyerɛw anyɛ yiye koraa no, passkey abien a efi providers ahorow hɔ - sɛ nhwɛso no, passkey biako wɔ Apple Passwords / Google Password Manager NE backup passkey a ɛto so abien wɔ Bitwarden / 1Password mu (anaasɛ wɔ honam fam YubiKey so).
• Mmara 2 - Kyerɛw Physical Hardware Security Keys ABIEN (YubiKey 5 NFC / . Token2), na fa backup key no sie off-site: Kɔtɔ abien \(25-\)55 FIDO2 ahobammɔ nsafe. Kyerɛw abien no nyinaa nsafe no wɔ wo Google Akontaabu, Apple Akontaabu (a ɛhwehwɛ sɛ wode hardware safoa 2 yɛ adwuma), Microsoft Akontaabu, ne Password Manager. Fa Key #1 sie wo keychain so na to Key #2 mu wɔ ofie a ogya ntumi nkɔ mu anaasɛ wo busuani bi a wogye no di fie. Sɛ mpo wo fon ne wo laptop hyew wɔ ogya mu a, sɛ wode Key #2 hyɛ nhomakorabea anaa kɔmputa foforo biara mu a, ɛde wo kɔ wo dijitaal asetra nyinaa mu wɔ sikɔne 3 mu.
• Mmara 3 - Hyehyɛ Apple "Akontaabu a Wɔsan Yɛ Nkitahodi" (iOS) ne Google "Nkitahodi a Wɔsan Yɛ / Email a Wɔsan Nya":
• Wɔ iPhone so: Settings -> [Your Name] -> Sign-In & Security -> Account Recovery -> Add Recovery Contact (paw ɔhokafo, ɔwofo, onua, anaa adamfo a wogye no di a ɔde iPhone di dwuma).
• Wɔ Google: Nsrahwɛ myaccount.google.com/security na hwɛ hu sɛ Recovery Phone ne external Recovery Email (a wɔmfa nhyɛ Gmail akonta koro no ara so - sɛ nhwɛso no, ProtonMail anaa Outlook address) nyinaa yɛ adwuma, na tintim wo Google Backup Codes 10 a wode di dwuma pɛnkoro a ɛwɔ digit 8 wɔ krataa so.
• Mmara 4 - Kyerɛw wo Emergency Recovery Sheet no gu honam fam krataa so na fa sie wo Passport / Birth Certificate: Kyerɛw wɔ honam fam index kaad biako a wɔde asie wo sikakorabea so: (1) Wo Apple/Google Akontaabu Email & Password, (2) Wo Phone Lock-Screen Passcode / Google Password Manager 6-Digit PIN, (3) Wo Password Manager Master Password + Secret Key, ne (4) Wo 8-digit / 25-character Backup Recovery Codes.

--- .

Mpɔtam hɔ ntɛmpɛ nɔma ne adwumakuw no nhyehyɛe ahorow¶

Sɛ wo passkey mfiri ahorow no yerae esiane korɔnbɔ, adwowtwa, anaa honam fam asiane bi nti a, wo ne polisifo, wo mobile carrier, ne adetɔfo ahobammɔ adwumayɛbea ahorow yɛ biako:

• United States ne Canada: Dial ** .911** sɛ wɔfaa wo fon ne laptop wɔ adwowtwa mu a, nya Police Report Number, bisa wo carrier no sɛ ɔmfa nea wɔawia no nkɔto hɔ IMEI wɔ GSMA Stolen Device Blocklist so bere a wode SIM foforo rema no, na bɔ amanneɛ sɛ wɔhyɛ nkurɔfo ma wowia passcode wɔ FBI IC3 (ic3.gov) na ɛyɛ.
• Ahemman: Dial ** .999** ma adwowtwa a ɛyɛ nnam anaasɛ ** .101** ma Polisifo Nsɛmmɔnedi Ho Nkyerɛkyerɛmu Nɔma, na bɔ IMEI a wowia ne akontaabu a wɔde kɔ Action Fraud (0300 123 2040 / . actionfraud.police.uk) na ɛyɛ.
• Europa Aman Nkabom Kuw: Dial 112 wɔ EU aman nyinaa mu na fa korɔnbɔ ho mpaemuka a ɛfata kɔma mpɔtam hɔ polisifo sɛ wɔmfa mfiri no din nhyɛ mu IMEI.
• Australia ne New Zealand: Dial ** .000** wɔ Australia anaa ** .111** wɔ New Zealand no, bisa wo carrier no sɛ onsiw handset a wowiae no kwan IMEI wɔ ntwamutam nyinaa so, na di nkitaho IDCARE (1800 595 160) na ɛyɛ.
• India ne Asia-Pacific: Dial ** .112, nya SIM card a ɛyɛ abien, na siw telefon a wowiae no de ano IMEI ɔman no mu nyinaa wɔ ** .ceir.gov.in ( ) .14422).

--- .

Nsɛm a wɔtaa bisa¶

Sɛ owifo bi wia me iPhone anaa Android fon a, so wobetumi de me Passkeys no akɔ me sikakorabea, Google, anaa crypto akontaabu mu?¶

Dabi, ɛnyɛ gye sɛ wonim wo lock-screen passcode nso anaasɛ wɔhyɛ wo biometric (`Face ID` / . `Fingerprint`). FIDO2 / WebAutn passkey biara hwehwɛ Ɔdefo no Nhwehwɛmu (`UV`) . ansa na fon no hardware security chip no de ne nsa ahyɛ login asɛnnennen ase. Sɛ mpo owifo no gye wo fon bere a wɔabue no a, sɛ wode passkey kɔ wɛbsaet anaa app bi mu a, ɛkanyan foforo Anim ID, Touch ID, anaa Nsateaa nkyerɛwee scan. Sɛ wopɛ sɛ wugyae akorɔmfo a wɔrebɔ wo mmati so a wɔhwɛɛ wo sɛ worekyerɛw wo PIN no a, ma ɛnyɛ adwuma Apple Stolen Device Ahobammɔ (`Settings > Face ID & Passcode > Stolen Device Protection`) ne Android Korɔnbɔ a Wohu Lock / Identity Check (`Settings > Google > All services > Theft protection`), a ɛhyɛ biometric-only authentication wɔ akyirikyiri fi fie.

Adɛn nti na wɛbsaet no ka kyerɛɛ me sɛ memfa me fon scan QR code bere a me klik "Sign in with a passkey" wɔ me Windows PC so - ɛwom mpo sɛ mannya passkey da wɔ me Windows PC so de?¶

Bere a woyɛɛ saa wɛbsaet no passkey wɔ wo fon so no, wɛbsaet no siee frankaa bi a ɛkae sɛ wowɔ mobile passkey. Sɛ wufi desktop browser a enni saa local passkey no so kɔ mu a, browser no befi ase FIDO Cross-Device Nhwehwɛmu a Wɔde Di Dwuma (`Hybrid Transport` / . `caBLE`) ., a ɛkyerɛ QR code sɛnea ɛbɛyɛ a wo fon no betumi de Bluetooth ahyɛ wo nsa ahyɛ ase sɛ wobɛkɔ mu. Sɛ wo fon no ayera a, klik so Twa mu wɔ QR code mfɛnsere no so na klik so "Sɔ ɔkwan foforo hwɛ" / "Fa password hyɛ mu". wɔ wɛbsaet krataafa a ɛwɔ ase hɔ no so.

Sɛ mepopa passkey bi fi me Apple Passwords app anaa Google Password Manager, so ɛno ara yi passkey no fi wɛbsaet no server so nso?¶

Mpɛn pii no, dabi. Gye sɛ wɛbsaet ne password manager no nyinaa boa WebAutn Signal API no, sɛ wopopa passkey bi wɔ wo password manager no mu a, eyi nkutoo fi hɔ kokoam safoa fi wo vault bere a wɛbsaet no da so ara kura ɔmanfo safe na ɔkɔ so kanyan no ma ɔyɛ saa. Bere biara a wobɛhwere device-bound passkey (te sɛ laptop a abubu anaa YubiKey a ayera) no, kɔ wɛbsaet no de no mu Akontaabu Nhyehyɛe > Ahobammɔ > Passkeys page na popa passkey entry a ayera no wɔ hɔ nso.

So metumi de me Passkeys nyinaa akɔ amannɔne anaasɛ mede afi iPhone so akɔ (iCloud Keychain) kɔ Android fon so (Google Password Manager) anaasɛ 1Password / . Bitwarden?¶

Wontumi mfa passkeys nkɔ baabi a enni encrypted `.csv` spreadsheet efisɛ plaintext export bɛma kokoam safoa biara ada malware adi. Nanso, sɛ wofi ase wɔ iOS 18.2+ ne Android 15+ na ɛwɔ hɔ, Apple, Google, 1Password, ne Bitwarden boa ma FIDO Apam no `Credential Exchange Protocol (CXP)` (`Settings > Apps > Passwords > Export / Import`) ma wɔde kɔ baabi foforo a wɔabɔ no kokoam. Wɔ mfiri dedaw so no, kɔ wo wɛbsaet ahorow a ɛwɔ soro no mu wɔ mfiri foforo no so na klik "Fa passkey foforo ka ho". sɛ wobɛkyerɛw passkey a ɛto so abien tẽẽ akɔ wo vault foforo no mu.

Sɛ mesesa me iPhone Lock-Screen Passcode anaa me Android Screen Lock PIN a, dɛn na ɛba me passkeys so?¶

Wo passkeys no kɔ so yɛ nea ahobammɔ wom ɔha biara mu nkyem 100 na ɛsan kyekyere wɔn cloud escrow encryption key no kɔ wo passcode anaa PIN foforo no so. Hwɛ wo PIN a wowɔ mprempren ne wo PIN a edi kan ntɛm ara no nyinaa kosi sɛ mfiri nyinaa bewie sync.

So ɛsɛ sɛ mepopa password a ɛwɔ me accounts so bere a mede Passkey aka ho no?¶

Wɔ wɔn a wɔde di dwuma dodow no ara fam no, . fa password a ɛyɛ den na ɛyɛ soronko a ɛwɔ nkyerɛwde 20 a wɔayɛ no kwa a wɔde asie wo password manager no mu wɔ wo passkeys no nkyɛn, ne backup codes a wɔatintim a ɛwɔ digit 8. Sɛ wode random password (anaasɛ backup YubiKey + printed recovery codes) sie a, ɛma wo OS-independent escape hatch sɛ wohwere wo fon bere a wode Windows anaa Linux kɔmputa a woafɛm nkutoo na ɛretu kwan a.

--- .

Akwankyerɛ ahorow a ɛfa ho¶

• MFA lockout ne authenticator a wɔsan nya
• iPhone Stolen Device Protection, recovery key lockout, ne Apple Akontaabu agyapadeɛ nkitahodie nkwagye
• Password manager lockout, master password a wɔhwere, ne vault a wɔsan nya
• Two-factor nokwaredi telefon nɔma a wɔasan de adi dwuma denam carrier ne SMS 2FA lockout
• Laptop anaa fon a wowia: remote wipe ne account lockdown
• Session cookie hijacking, infostealer malware, ne passkey a wɔtwa
• Nnɔmba a egye ntɛmpɛ sɛnea ɔman biara te

--- .

Fibea ne aban akwankyerɛ¶

• FIDO Apam & Wiase Nyinaa Wɛbsaet Kuw (W3C): Wɛb Ahoɔden a Wɔde Di Dwuma (WebAuthn Level 3) Nkyerɛkyerɛmu, Multi-Device Credentials ( .Synced Passkeys) vs. Mfiri Baako (Device-Bound) Adansedi nkrataa, ne Adansedi Nsesa Protocol ( .CXP).
• Ɔman Asoɛe a Ɛhwɛ Gyinapɛn ne Mfiridwuma So (NIST) (United States): Nwoma Titiriw 800-63B (Nsakraeɛ 4 / Suppl.): Digital Identity Akwankyerɛ - Nokwarediɛ ne Nkwa Nna mu Nhwɛsoɔ (Syncable Authenticators ne Account Recovery Flows).
• Apple Platform Ahobanbɔ Ɔmanfoɔ Nwoma: iCloud Keychain Escrow Architecture, Passkeys Synchronization, ne Account Recovery Contacts (support.apple.com/en-us/102641).
• Google Security Blog & Android Developers Nwoma: Passkey Awiei-kɔ-Awiei Encryption wɔ Google Password Manager (Google Titan Keychain Escrow) ne Cross-Device Passkey a Wɔsan Yɛ.
• Ɔman Intanɛt so Ahobammɔ Asoɛe (NCSC) (United Kingdom) & Intanɛt so Ahobammɔ ne Nnwuma Ahobammɔ Dwumadibea (CISA) (United States): Passkys ne Phishing-Resistant MFA Deployment ne Recovery Akwankyerɛ.