Wò Passkey Devices Katã Bu (iCloud Keychain / Google Password Manager / YubiKey): Akɔntabubu Gbugbɔgaxɔ Nyagbewo Manɔmee¶

Wò smartphone kple laptop ƒe bu le ɣeyiɣi ɖeka me - eɖanye le adzodada, agbawo fifi le duta, aƒe ƒe dzobibi, tsiɖɔɖɔ, alo xɔtunuwo ƒe gbagbã le ɣeyiɣi ɖeka me o - hea egbegbe mɔxexeɖenu dziŋɔ aɖe vɛ: the Circular Passkey Dependency Trap. Ne èdze agbagba be yeage ɖe kɔmpiuta yeye alo telefon yeye aɖe si woatsɔ aɖɔlii me be yeagaxɔ yeƒe agbe la, gege ɖe eme ƒe screen la bia tso asiwò be "Zã passkey le wò fon dzi alo nàtsɔ wò fotoɖemɔ̃ awɔ QR code sia scan" (Cross-Device Authentication / . CTAP 2.2 Hybrid Transport). Elabena telefon si lé wò passkeys (iCloud Keychain / Apple Passwords, . Google Password Manager, . 1Password, . Bitwarden, alo Windows Hello). Mègatsi dzodzodzoe o: negbe ɖe nèbu Apple Recovery Key si me ŋɔŋlɔdzesi 28 le si nèwɔ ɖe ɖoɖo nu KPLEE mɔ̃ ɖesiaɖe si dzi nèka ɖo siaa, alo nèŋlɔ ŋkɔ ɖe Hardware Security Key si me ŋɔŋlɔdzesi 28 le sesẽe me (YubiKey) ɖoɖowɔɖi eye wòbu safui ŋutɔŋutɔ siwo katã woŋlɔ ŋkɔ na la, wometu wò safui siwo wowɔ ɖekae ɖe telefon si bu ƒe silicon ŋutɔŋutɔ me o. Alilikpo me safui siwo wowɔ ɖeka (multi-device credentials le FIDO2 / WebAuthn ƒe nɔnɔmetata te) wodzra wo ɖo ɖe alilikpo me nudzraɖoƒe si wotsɔ nya ɣaɣlawo ŋlɔ tso nuwuwu vaseɖe nuwuwu (iCloud Keychain Escrow alo Google Password Manager Security Domain) si woate ŋu aʋu le mɔ̃ yeye si woatsɔ aɖɔlii dzi to wò telefon xoxoa ƒe lock-screen passcode/PIN + SIM/eSIM asitelefon xexlẽdzesi bubu zazã me. Ne èdi authenticator app TOTP lockouts la, kpɔ hã MFA lockout kple authenticator gbugbɔgaxɔ; ne wò telefondɔwɔƒea gbugbɔ zã wò telefon xexlẽdzesi esime wotu wò la, kpɔe ɖa nu eve ƒe kpeɖodzinana telefon xexlẽdzesi si dɔwɔƒea gbugbɔ zã; alo ne èŋlɔ wò master password be yi ame etɔ̃lia ƒe nudzraɖoƒe la, ke lé ŋku ɖe eŋu password manager lockout kple vault gbugbɔgaxɔ. Ne ɖeko wofi wò mɔ̃wo le adzodada ŋutasesẽtɔe alo aƒe dzi dzedze me ko la, ƒo ka na wò nutoa me ƒe xexlẽdzesi kpata (911 le United States kple Canada, . 112 le Europa Dukɔwo ƒe Habɔbɔa katã me la, . 999 le United Kingdom) tso eteƒekpɔla aɖe ƒe telefon dzi alo kpɔ míaƒe xexeame katã ƒe nyatakakadzraɖoƒe si nye xexlẽdzesi siwo wozãna kpata.

Wɔ esia fifia¶

1. Do ŋgɔ na nu bubu ɖesiaɖe la, se nusita màte ŋu agbugbɔ Apple iCloud Passkey aɖo Windows PC ɖeɖeko dzi (alo Google Passkey ɖe browser si menye Chrome o dzi wò fon manɔmee o) gɔme:
2. Ne èzi "Sign in with a passkey" dzi le Windows PC dzi eye wòɖe QR code aɖe afia si bia tso asiwò be nàtsɔ wò iPhone awɔ scan nɛ (FIDO Cross-Device Authentication / caBLE), be QR code bia be nàwɔ Bluetooth + internet asiléle le agbe kple iPhone/iPad/Mac ŋutɔŋutɔ si me woʋu wò iCloud Keychain xoxo.
3. MÀTE ŊU awɔ wò iCloud Keychain ƒe passkeys ƒe kɔpi tẽ ɖe Windows browser si le eɖokui si me Apple dɔwɔnu manɔmee o (negbe ɖe woɖo kpe iCloud for Windows dzi xoxo hafi). Be nàgaxɔ iCloud-synced passkeys ne wò iPhone megali o la, ele be nàwɔe be:
   • (A) Zɔ yi asitelefon dzi dɔwɔƒe ƒe fiase aɖe me gbã, wɔ SIM alo eSIM si woatsɔ aɖɔli la ŋudɔ le iPhone si woɖɔli/si nèdo (alo iPad/Mac) dzi, ge ɖe wò Apple Account me to SMS code si woɖo ɖe SIM ma si woatsɔ aɖɔlii la zazã me, eye nàŋlɔ wò iPhone xoxoa ƒe xexlẽdzesi 6 ƒe lock-screen passcode be nàtsɔ aɖe iCloud Keychain la me; ALOO
   • (B) Le nyatakakadzraɖoƒe si nèle agbagba dzem be yeaɖo (abe Amazon, . PayPal, . GitHub, . Best Buy, . eBay, alo Microsoft), zi "Te mɔ bubu kpɔ" / "De asi ete le mɔ bubu nu" / "Kuxi le ŋuwò le gege ɖe eme me?" le Passkey ƒe nyabiasea te be nàtrɔ ayi wò Nyagbegbɔgblɔ + SMS / Email / Backup Code gbɔ.
4. Zɔ yi ɖe dɔwɔƒe aɖe ƒe asitsaƒe aɖe si le wò asitelefon dzi (Verizon, . AT&T, . T-Mobile, . EE, . Vodafone, . O2, . Rogers, . Bell, . Telstra) kple wò dziɖuɖu ƒe foto ID ŋutɔŋutɔ be nàxɔ SIM kaɖi alo eSIM bubu GBÃTƆ:
5. Ke ƒe dzesidenu dɔwɔƒe ɖesiaɖe kloe (Apple iCloud, . Google Account, . Microsoft Account, . Samsung Account) zãa wò asitelefon xexlẽdzesi si dzi nèka ɖo abe bootstrap factor vevitɔ ene ne mɔ̃ ŋutɔŋutɔwo katã bu. SIM kaɖi ŋutɔŋutɔ si woatsɔ aɖɔlii (si nàte ŋu atsɔ aƒu gbe ɖe telefon si womeʋu o si ƒe home nye dɔlar 30 alo xɔ̃wò ƒe telefon si susɔ me) xɔxɔ gblẽa mɔxexeɖedɔa nu le aɖabaƒoƒo 10 me to mɔɖeɖe be nàxɔ SMS/gbe gbugbɔgaxɔ ƒe kɔpi si hiã be nàge ɖe wò root cloud akɔnta me.
6. Ðo ŋku wò MISSING telefon ƒe xexlẽdzesi 4 alo xexlẽdzesi 6 Lock-Screen Passcode / PIN / Pattern dzi - enye cryptographic decryption key na wò synced passkeys:
7. Wo ame evea siaa Apple (iCloud Keychain Escrow) kple Google (Google Password Manager End-to-End Encryption) tsɔ wò paskey siwo wowɔ ɖekae la ɣla ɖe alilikpoa me ale be Apple alo Google mate ŋu axlẽ wo o. Ne ège ɖe telefon yeye aɖe me le mɔ̃ xoxowo katã bu vɔ megbe la, Apple alo Google abia be: "Ŋlɔ wò [iPhone / Pixel / Galaxy] si bu ƒe passcode / screen lock PIN tsãtɔ be nàgbugbɔ wò password kple passkey siwo nèdzra ɖo la aɖo anyi." Do meganye guess wildly: you typically have 10 attempts before the Hardware Security Module (HSM) escrow vault gblẽa eɖokui ɖa tegbee be wòaxe mɔ ɖe amedzizizi ŋutasesẽtɔe nu.
8. Kpɔe ɖa be tablɛt xoxo aɖe, telefon xoxo aɖe si wotsɔa agbalẽdzraɖoƒe, dɔwɔƒe ƒe kɔmpiuta, alo ƒomea me tɔ ƒe web-browser gakpɔtɔ le dɔ wɔm le gege ɖe eme ƒe ɣeyiɣi aɖe me hã:
9. Hafi nàdze ŋkeke 3 va ɖo 14 ƒe Automated Account Recovery blewu gɔme (iforgot.apple.com alo accounts.google.com/signin/recovery), lé ŋku ɖe iPad xoxo ɖesiaɖe, Android-telefon xoxo ɖesiaɖe si le kplɔ̃dziɖaka me, aƒeme kplɔ̃dzi PC, alo Chrome/Edge ƒe nɔnɔmetata ŋu le dɔwɔƒe. Ne mɔ̃ ɖeka gɔ̃ hã gakpɔtɔ le wò Apple, Google, Microsoft, alo 1Password akɔnta me la, àte ŋu ada asi ɖe mɔ̃ yeyea ƒe gege ɖe eme dzi le sɛkɛnd 5 me ŋkeke aɖeke malala o.
10. Ne wofi wò iPhone alo Android (mebu le dzo me o) la, de dzesii be "Bu" (Lost Mode), MÈGAZI "Ðe le Akɔntabubu Me" GBEÐE o:
11. Le icloud.com/find (si wɔa dɔ 2FA manɔmee be woatsɔ ade dzesi mɔ̃ aɖe ko be Bu) alo google.com/android/find, na Lost Mode / Lock Device nawɔ dɔ ale be fiafitɔa mate ŋu azã wò passkeys o. MÈGAZI "Ðe Mɔ̃ Sia" dzi le wò akɔntabubu ƒe xexlẽdzesiwo me esime wòle fiafitɔa si me, elabena eɖeɖe ɖa atsi Activation Lock (Find My), si ana fiafitɔa natutu telefon la ahagbugbɔ adzrae.
12. Ne ènya gage ɖe wò root akɔnta me ko la, te fli ɖe Device-Bound Passkeys ɖesiaɖe (Windows Hello, . Mac Touch ID, alo bu YubiKeys) si wodzra ɖo ɖe xɔtunu siwo bu la dzi:
13. Togbɔ be Synced Passkeys le wò cloud account kple lock screen kpɔa ta na hã la, Device-Bound Passkeys nɔa laptop si wofi la me TPM 2.0 chip alo fififi YubiKey. Yi akɔnta ɖesiaɖe ƒe Security -> Passkeys settings page eye nàtutu passkey si wotsɔ ŋkɔ na laptop si wofi alo YubiKey si bu la.

--- .

Nyametsotsoti: gbagbã tso gotagome passkey lockout me ne mɔ̃wo katã bu¶

Dze nyametsotsoti sia yome le afisi wodzra wò passkeys ɖo (Apple iCloud Keychain, . Google Password Manager, . 1Password / Bitwarden, alo Hardware Security Keys) be nàxɔ wò gakɔntawo le ɖoɖo nyuitɔ nu:

flowchart TD
    Start["Passkey Devices (Telefon, Laptop, alo YubiKey) Katã Bu, Wofi, Alo Wotsrɔ̃"] --> WhereStored{"Afikae Wodzra Wò Passkeys Ðo?"}

    WhereStored -->|"1. Apple iCloud Keychain / Apple Nyagbewo ƒe Dɔwɔɖoɖo (iPhone / iPad / Mac) ."| ApplePath["ATA 1A: Yi Carrier Store kple Photo ID -> Xɔ SIM / eSIM si Woɖɔli na Wò Telefon Xexlẽdzesi"]

    WhereStored -->|"2. Google ƒe Nyagbewo Dzikpɔla (Android Telefon / Chrome ƒe Nɔnɔmetata) ."| GooglePath["ATA 1B: Xɔ SIM si Woaɖɔli ALOO Zã Email si Woatsɔ Aɖɔli -> Ge Ðe Google Me le Telefon / Chrome si Woɖɔli Me"]

    WhereStored -->|"3. Ame Etɔ̃lia ƒe Nudzraɖoƒe (1Nyagbegbɔgblɔ, Bitwarden, Dashlane, Proton Pass) ."| VaultPath["ATA 1C: Ge Ðe Vault Me Le Mɔ̃ Ðesiaɖe Dzi Zã Master Password + Secret Key / 2FA Recovery Code"]

    WhereStored -->|"4. Hardware-Bound Ko (YubiKey Bu / Windows Hello Kɔmpiuta TPM Bu)"| HardwarePath["AFƆKPƆ 1D: Hardware-Bound Passkeys MEGAWƆ Ðeka kple Alilikpoa GBEÐE o -> Ele Be Nazã Account Fallback Mɔnu"]

    ApplePath --> BorrowApple{"Ðe iPhone, iPad, alo Mac si Woatsɔ Aɖɔli/Wodo Le Asiwò Fifiaa?"}
    BorrowApple -->|"Ɛ̃"| DecryptiCloud["Ge ɖe eme kple Apple ID Password + SMS to Replacement SIM -> Ŋlɔ OLD iPhone ƒe 6-Digit Lock-Screen Passcode -> All Synced Passkeys Download Enumake"]
    BorrowApple -->|"Ao: Windows / Linux PC koe Nanɔ asiwò"| BypassWebAuthn["Le Nyatakakadzraɖoƒe Siwo Nàɖo Tae Dzi la, Zi ‘Te Mɔ Bubu’ Dzi Le Passkey Prompt Te -> Zã Nyagbegbɔgblɔ + SMS nàtsɔ Aɖɔli SIM (alo Ƒle/Do iPhone/iPad Si Zã Siwo Mexɔ Asi O)"]

    GooglePath --> DecryptGPM["Google ƒe Nyabiasewo: ‘Ŋlɔ Wò Android Screen Lock PIN / Kpɔɖeŋu Xoxoa (alo Google Password Manager PIN si me xexlẽdzesi 6 le)’ -> Passkeys Katã Siwo Wowɔ Ðekae la Ʋu Enumake"]

    VaultPath --> VaultUnlock["Vault Extension / App Tsɔ Passkeys Katã Siwo Wowɔ Ðekae Yi Mɔ̃ Yeye Dzi Enumake"]

    HardwarePath --> FallbackAuth["Zi 'Te Mɔ Bubu' dzi le Login Screen -> Zã Backup YubiKey, 8-Digit Backup Codes, Authenticator App, SMS, alo Identity Verification"]

    DecryptiCloud --> AuditRevoke["ATA MƆKPƆKPƆ MƆKPƆKPƆ: Te fli ɖe Mɔ̃ɖaŋununya ƒe Ɣeyiɣi Siwo Wofi Me & Tsɔ Mɔ̃a Ƒe Passkeys Tututu Le Hardware Si Bu Dzi"]
    BypassWebAuthn --> AuditRevoke
    DecryptGPM --> AuditRevoke
    VaultUnlock --> AuditRevoke
    FallbackAuth --> AuditRevoke

--- .

Akpa 1: Passkeys Siwo Wowɔ Ðekae (Multi-Device) vs. Hardware-Bound Passkeys ( .Single-Device) .¶

Nu #1 si naa tɔtɔ le mɔ̃a ƒe bu ƒe nɔnɔme kpata aɖe me enye be womenya nenye be passkey aɖe koŋ nye Cloud-Synced (Discoverable Multi-Device Credential) alo Mɔ̃ si Wobla (Single-Device Credential). Kpɔ kplɔ̃ sia ɖa be nànya enumake be passkey siwo agadze le wo ɖokui si ne ègaxɔ wò cloud vault kple esiwo ku kple hardware si bu:

--- .

Akpa 2: Afɔɖeɖe ɖesiaɖe ƒe Gbugbɔgadzɔ Ne Wò iPhone (kple Mac/iPad) Katã Bu Alo Wofi¶

Tsɔe be wofi wò iPhone kple MacBook siaa le amedzrodzeƒexɔ aɖe me (alo wogblẽ wo dome le dzobibi me), eye nyatakakadzraɖoƒe ɖesiaɖe si nèdze agbagba be yeage ɖe eme la bia tso asiwò be "De asi eme kple passkey tso wò iPhone dzi." Wɔ ɖe ɖoɖo sia tututu dzi be nàgbã ʋuƒoa:

Afɔɖeɖe 1: Gbugbɔ Wò Asitelefon Xexlẽdzesi De SIM alo eSIM Si Woɖɔli¶

Nukatae wò telefon xexlẽdzesi nye safui vevitɔ si ana nàgaxɔ Apple Account? Elabena ne wò Apple "Mɔ̃ Siwo Dzi Woka Ðo" (iPhone, . iPad, . Mac) megali o, Apple ƒe nu eve ƒe kpeɖodzinana dɔwɔƒea trɔna le eɖokui si ɖe Xexlẽdzesi 6 SMS alo gbeɖiɖi kaƒoƒo si wowɔ le wo ɖokui si ɖoɖo ɖe wò Telefon Xexlẽdzesi si Dzi Woka Ðo ŋu. 1. Zɔ yi ɖe fiase aɖe si dziɖuɖua da asi ɖo me na wò asitelefon dzi dɔwɔƒe (Verizon, . AT&T, . T-Mobile, . Vodafone, . EE, . Rogers, . Telstra, kple bubuawo) kple wò Passport alo Ʋukugbalẽvi. 2. Bia teƒenɔla la be ɖe telefon si wofi la ƒe SIM/eSIM (IMEI blacklist ne wofie) eye nàna SIM kaɖi ŋutɔŋutɔ si woatsɔ aɖɔlii (alo nàwɔ eSIM ŋudɔ le telefon si woatsɔ aɖɔlii dzi). 3. De SIM kaɖi ma si nàtsɔ aɖo eteƒe la telefon ɖesiaɖe si le dɔ wɔm me (telefon si woate ŋu atrɔ asi le si ƒe home nye dɔlar 20 alo smartphone si nèdo gɔ̃ hã) ale be nàte ŋu axɔ SMS nyatakaka siwo va kple telefon kaƒoƒo siwo wowɔ ɖe wò xexlẽdzesi dzi.

Afɔɖeɖe 2: Ge Ðe Wò Apple Akɔntabubu Me eye nàɖe Decrypt iCloud Keychain¶

Ne ènya xɔ SMS nyatakakawo le wò telefon xexlẽdzesi dzi ko la, mɔ eve anɔ asiwò le alesi nàte ŋu age ɖe Apple ƒe dɔwɔnu aɖe me nu:

Mɔ A: ȃle iPhone, iPad, alo Mac si woatsɔ aɖɔlii, èdo ga, alo nèle esi¶

1. Le mɔ̃a ƒe ɖoɖowɔwɔ me (alo le... Settings -> Sign in to your iPhone), ŋlɔ wò Apple Account email kple password.
2. Ne wobia tso asiwò be nàbia xexlẽdzesi 6 ƒe kpeɖodzinya "si woɖo ɖe wò mɔ̃ bubuwo," zi "Mèxɔ kpeɖodzinya oa?" -> "Nuŋɔŋlɔ ƒe kɔpi na [wò telefon xexlẽdzesi]".
3. Ŋlɔ xexlẽdzesi 6 ƒe SMS-kɔda si nèxɔ ɖe wò SIM si nàɖɔli la me.
4. **Nu Vevitɔ iCloud Keychain Escrow Nyabiase **: Eyome, iOS/macOS abia be: "Ŋlɔ wò iPhone bubu ƒe passcode '[Name's iPhone]'. Wò passcode nye nya ɣaɣla eye Apple mateŋu axlẽe o. Wozãnɛ tsɔ kpɔa wò password siwo nèdzra ɖo kple nyatakaka vevi bubuwo le iCloud me."
5. Ŋlɔ xexlẽdzesi 4 alo xexlẽdzesi 6 ƒe lock-screen passcode si tututu nèzã le iPhone si bu/si wofi la.
6. Le sɛkɛnd 30 me la, Apple ƒe xɔtunuwo ƒe dedienɔnɔ ƒe mɔ̃ (HSM) ɖoa kpe wò passcode dzi, ɖea asi le wò iCloud Keychain decryption key, eye **aɖe wò Passkeys, Passwords, kple 2FA Verification Codes siwo wotu ɖe eme la ƒe alafa memama 100 ɖe... Passwords app le Apple ƒe mɔ̃ yeyea dzi. Èhaya keŋkeŋ.

Mɔ B: Apple dɔwɔnu aɖeke mele asiwò fifia o (Windows alo Linux PC alo Android telefon koe le asiwò)¶

Ke ne èle mɔ zɔm yi duta, wofi wò iPhone, eye Windows kɔmpiuta alo Android telefon koe le asiwò ya ɖe? 1. Se seɖoƒea gɔme: Màte ŋu awɔ ɖeka kple wò bliboe le dzɔdzɔme nu o iCloud Keychain passkey vault ɖe Android telefon alo Linux PC dzi Apple dɔwɔnu manɔmee. 2. Alesi nàwɔ ade wò akɔntabubuwo me (Google, . Amazon, . PayPal, . GitHub, . Bank) tso Windows/Android dzi fifia wò iPhone passkey manɔmee: - Nuƒlelawo ƒe nyatakakadzraɖoƒe aɖeke kloe metutua wò nyagbe alo fallback mɔnuwo ne èwɔ password key o. - Ne nyatakakadzraɖoƒea do Windows Security / QR code ƒe nyatakaka si bia tso asiwò be "Zã passkey tso iPhone alo iPad dzi," zi Cancel le Windows ƒe popup dzi, emegbe nàlé ŋku ɖe nyatakakadzraɖoƒea ƒe gegeɖegbalẽvia ŋu tẽ eye nàzi "Te mɔ bubu aɖe kpɔ" / "De asi ete le mɔ bubu nu" / "Zã nyagbe ɣaɣla ɖe eteƒe". - Ŋlɔ wò akɔnta ƒe nyagbegbɔgblɔ (alo zi "Ŋlɔ nyagbe ɣaɣla be?" dzi be nàgbugbɔ aɖoe to email/SMS dzi), eye ne wobia tso asiwò be nàna 2FA la, tia SMS Text / Voice Call (si va ɖo wò SIM kaɖi si nàɖɔli dzi) alo Email ƒe kpeɖodzinana.

Afɔɖeɖe 3: Ke ne èŋlɔ wò Apple Account ƒe nyagbe ɣaɣla hã be ALOO wò telefon xexlẽdzesi bu (iforgot.apple.com)?¶

• Ne èɖo Apple "Akɔntabubu Gbugbɔgaxɔ Kadodo" (Settings -> Sign-In & Security -> Account Recovery): Ƒo ka na wò ƒomea me tɔ alo xɔ̃wò si nye wò Recovery Contact. Na woaʋu Settings -> [Their Name] -> Sign-In & Security -> Account Recovery -> [Your Name] -> Get Recovery Code le woƒe iPhone dzi eye woaxlẽ Xexlẽdzesi 6 ƒe Gbugbɔgadzɔ na wò. Ŋlɔ kɔda ma ɖe wò mɔ̃ yeyea dzi be nàto lalaɣia ŋu eye nàgakpɔe enumake.
• Ne mèɖo Recovery Contact o: Yi ** .https://iforgot.apple.com** be nàdze Akɔntabubu Gbugbɔgaxɔ le Ðokuisi gɔme. Ne Apple ɖo kpe gaxɔgbalẽvi ƒe xexlẽdzesi alo telefon xexlẽdzesi ɖesiaɖe si nènya dzi vɔ la, edzea dedienɔnɔ ƒe lalaɣi si nye sedziwɔwɔ si wowɔna le wo ɖokui si (zi geɖe la, gaƒoƒo 24 va ɖo ŋkeke 14) gɔme.
• NUXLẼME VEVIEWO LE ƔEYIƔI ME iforgot.apple.com LALA ƑE ƔEYIƔI: Ne mɔ̃ aɖe gakpɔtɔ le asiwò si me Apple ƒe Akɔntabubu si bu la ate ŋu agbugbɔ aɖo kadodo me hena ɣeyiɣi aɖe la, tsie, eye mègaɖo biabia yeyewo ɖe enu enuenu o iforgot.apple.com, abe alesi nègbugbɔ dze agbalẽvia gɔme ene la, egbugbɔa ɣeyiɣidzidzenu la ɖoa Ŋkeke 1. Kpɔ wò ɣeyiɣi si nèxlẽa megbe ƒe nɔnɔme le iforgot.apple.com.

--- .

Akpa 3: Afɔɖeɖe ɖesiaɖe Gbugbɔgadzɔ Ne Wò Android Telefon (Google Password Manager) Wobu Alo Wofie¶

Ne wodzra wò nyagbewo ƒe safuiwo ɖo ɖe Google Password Manager me le Android-telefon si bu alo si gblẽ dzi (Google Pixel, . Samsung Galaxy, . Motorola, . OnePlus), Google ƒe xɔtuɖaŋu si wowɔ nyitsɔ laa na be cross-platform recovery le bɔbɔe wu alesi wònɔ tsã:

Afɔɖeɖe 1: Trɔ Yi Wò Google Akɔntabubu Me le Telefon alo Desktop Chrome Browser si Woaɖɔli Dzi¶

1. Le Android-telefon si woatsɔ aɖɔlii (alo Google Chrome me le Windows, Mac, alo Linux kɔmpiuta ɖesiaɖe dzi), yi accounts.google.com.
2. Ne Google bia tso asiwò be "Zã wò passkey nàtsɔ aɖo kpe edzi be wò ŋutɔŋutɔe" (si fia wò Android-telefon si bu la), mègazi Yi edzi le passkey ƒe nyabiasea dzi o. Ke boŋ zi ** dzi."Try another way"** le gegeɖegbalẽvia ƒe miame le ete.
3. Tia wò fallback ɖaseɖiɖi ƒe tiatia ɖeka:
4. Xɔ kpeɖodzinya ƒe kɔpi le [Your Phone Number] (zã wò SIM kaɖi si nàɖɔli tso fiase si me wotsɔa nuawo yinae me), ALOO
5. Ŋlɔ wò xexlẽdzesi 8 ƒe Backup Codes dometɔ ɖeka, OR
6. Xɔ kpeɖodzinya aɖe le wò Recovery Email adrɛs dzi (recovery-email@example.com), OR
7. Ŋlɔ wò Google Account Password.

Afɔɖeɖe 2: Ʋu Google Password Manager ƒe Nuwuwu vaseɖe Nuwuwu Encrypted Passkey Vault¶

Ne ènya ge ɖe wò Google Account me le Android-telefon yeyea dzi alo le kɔmpiuta dzi Google Chrome (chrome://password-manager/passwords): 1. Dze agbagba nàzã passkey ɖesiaɖe si nèdzra ɖo alo akpɔe. 2. Google aɖe dedienɔnɔ ŋuti nyabiase aɖe afia: "Ne èdi be yeazã wò passkeys le mɔ̃ sia dzi la, kpɔe ɖa be wòe. Ŋlɔ wò Google Password Manager PIN (alo screen lock na wò [Pixel / Galaxy] dɔwɔnu xoxoa)." 3. Ŋlɔ either ɖe eme: - Google Password Manager PIN si nye xexlẽdzesi 6 si nèwɔ esime nèɖo desktop password sync zi gbãtɔ, OR - Wò Android-telefon si bu ƒe Screen Lock PIN, Pattern, alo Password si sɔ pɛpɛpɛ. 4. Zi alesi nède PIN/Pattern ma me la, Google ƒe zero-knowledge Titan cloud vault ɖea wò passkeys gɔme le teƒea le mɔ̃ yeyea dzi - ne èle Windows alo Mac kɔmpiuta si zãa Chrome dzi gɔ̃ hã.

--- .

Akpa 4: Alesi Nàwɔ Ado le Nyatakakadzraɖoƒe Ðekaɖekawo ƒe Passkey Loops (Amazon, . GitHub, . Microsoft, . PayPal, . Coinbase, . Sony) .¶

Nyatakakadzraɖoƒe geɖewo mewɔ woƒe "Passwordless / Passkey" ƒe gegeɖe screens nyuie o: ne ènya ŋlɔ wò email adrɛs ko la, nyatakakadzraɖoƒea doa dzo na browser la tɔ le eɖokui si navigator.credentials.get() WebAutn API, si ado modal operating-system box si bia Bluetooth telefon alo USB dedienɔnɔ safui hafi nàkpɔ nyagbe ɣaɣla ƒe akpa aɖe gɔ̃ hã.

Aɖaŋu si tututu woatsɔ ato WebAuthn modal si wowɔna le wo ɖokui si le nyatakakadzraɖoƒe ɖesiaɖe ŋue nye esi:

1. Zi edzi Escape (Esc) alo nàzi edzi Cancel le Dɔwɔɖoɖo / Browser Passkey Popup GBÃTƆ:
2. Mègatu mega tu browser ƒe tab la o. Ne Windows Security, macOS, Chrome, alo Safari do system dialog si gblɔ be "De wò security key" alo "Scan QR code sia kple wò fon," zi ** dzi.Cancel** le popup ma me.
3. Ne browser la ƒe... navigator.credentials.get() ŋugbedodo trɔ gbɔ NotAllowedError (wote fli ɖe ezãla me), nyatakakadzraɖoƒe siwo woŋlɔ nyuie (Google, . Microsoft, . GitHub, . PayPal, . Amazon, . Shopify, . Kayak, . eBay) lé vodada ma enumake eye nàɖe kadodo ɣaɣla la afia: "Sign in another way", ** ."Use your password instead", alo ** ."Send a code to my email/phone".
4. Nyatakakadzraɖoƒe Tɔxɛ Sisi Hatches:
5. Microsoft ƒe Akɔntabubu (live.com / . outlook.com / . xbox.com): Zi edzi Cancel le passkey ƒe nyabiasea dzi -> zi ** dzi .Other ways to sign in** -> tia Zã nye nyagbegbɔgblɔ, Ðe kɔda ɖe nye gbugbɔgaxɔ ƒe e-mail, alo Ŋlɔ ŋɔŋlɔdzesi 25 ƒe gbugbɔgaxɔ ƒe kɔda. (Lala: Ðe nèna Microsoft ƒe "Passwordless Account" trɔ asi le afisi wotutu wò password ɖa keŋkeŋ le le wò akɔnta me ŋu tẽa? Le Microsoft Account si me Nyagbe aɖeke mele o gɔ̃ hã me la, ne èzi ** dziOther ways to sign in** ɖe mɔ na wò be nàɖo kpe edzi to wò Microsoft Authenticator cloud backup, Recovery Email, SMS, alo 25-ŋɔŋlɔdzesi Gbugbɔgadzɔ ƒe Code dzi.)
6. GitHub (github.com/login): Le "Sign in with a passkey" ƒe dzesi te la, ŋlɔ wò zãŋkɔ kple nyagbe si nèzãna ɖe etame, alo ne wobia tso asiwò be nàŋlɔ 2FA/WebAuthn le wò nyagbe ɣaɣla ŋɔŋlɔ vɔ megbe la, zi ** .More options -> Use your authenticator app alo Enter a recovery code**.
7. Coinbase / Kraken / Binance (Ne passkeys katã kple YubiKeys bu): Cryptocurrency asitɔtrɔ siwo ŋu wowɔ ɖoɖo ɖo meɖe mɔ meɖe mɔ na SMS fallback si mele dedie o ne èŋlɔ passkey alo YubiKey ŋkɔ o. Zi ** dzi.Try another way -> I lost my passkey / security key be woadze asitɔtrɔa ƒe ID + Live Video Selfie Biometric Verification (2FA Reset), si xɔa wò passkey si bu la teƒe le gaƒoƒo 24 va ɖo 48 ƒe dedienɔnɔ ƒe fafa si wòle be nàwɔ vɔ megbe.
8. Discord: Ne èwɔ Passkey / Security Key MFA ŋudɔ le Discord dzi eye wò fon/YubiKey bu la, zi ** dzi.Authenticate with a backup code** (xexlẽdzesi 8 ƒe kɔpi tso... discord_backup_codes.txt), alo ne SMS Fallback gakpɔtɔ le dɔ wɔm le Discord me la, zi ** dzi .Receive a code via SMS**.

--- .

Akpa 5: "Dzotɔ & Fififi-Kpeɖodzi" Passkey Xɔtuɖaŋu Tutu (Ale Be Màgate Ŋu Axe Mɔ Na Wò Azɔ Azɔ O)¶

Ne ènya xɔ wò akɔntabubuwo ko la, zã miniti 20 nàtsɔ awɔ ɖoɖo ɖe 3-pillar passkey redundancy rule sia si FIDO Alliance kple NIST kafu la ŋu:

• Se 1 - Mègaɖo ŋu ɖe lãwo ƒe agbenɔnɔ ƒe ɖoɖo ɖeka ƒe passkey vault ŋu gbeɖe o; dzra cross-platform passkey ɖo ɖe 1Password alo Bitwarden (alo ŋlɔ alilikpo vovovo 2 ɖi): Le wò nuŋlɔɖi 5 siwo ɖea ɖeklemi wu la dzi (Google, . Apple, . Microsoft, . Password Manager, . Primary Bank), ŋlɔ nyagbegbɔgblɔ ƒe safui eve ya teti tso dɔwɔƒe vovovowo gbɔ - le kpɔɖeŋu me, nyagbɔgblɔ ƒe safui ɖeka le Apple Passwords / Google Password Manager KPLE megbenya evelia si woatsɔ adzra ɖo ɖe Bitwarden / 1Password me (alo le YubiKey ŋutɔŋutɔ dzi).
• Se 2 - Ŋlɔ Dzɔdzɔmeŋusẽŋununya ƒe Dedienɔnɔ Safui EVIE (YubiKey 5 NFC / . Token2), eye nàna backup key la nanɔ teƒe bubu: Ƒle eve \(25-\)55 FIDO2 dedienɔnɔ ƒe safuiwo. Ŋlɔ evea siaa safuiwo ɖe wò Google Account, Apple Account (si hiã hardware safui 2 ne wowɔe), Microsoft Account, kple Password Manager. Na Safui #1 nanɔ wò safui dzi eye nàtu Safui #2 ɖe aƒe si me dzo mate ŋu age ɖo o me alo le ƒometɔ si dzi nèka ɖo ƒe aƒeme. Ne wò fon kple kɔmpiutadziɖoɖoa bi le dzo me gɔ̃ hã la, ne ètsɔ Safui #2 de agbalẽdzraɖoƒe alo kɔmpiuta bubu ɖesiaɖe me la, ana nàge ɖe wò dijitaal agbe bliboa me le sɛkɛnd 3 me.
• Se 3 - Ðo Apple "Akɔntabubu Gbugbɔgaxɔ Kadodo" (iOS) kple Google "Gbugbɔgaxɔ ƒe Kadodo / Gbugbɔgaxɔ ƒe Email":
• Le iPhone dzi: Settings -> [Your Name] -> Sign-In & Security -> Account Recovery -> Add Recovery Contact (tia srɔ̃wò, dzila, nɔviwò, alo xɔlɔ̃ si dzi nèka ɖo si zãa iPhone).
• Le Google: Tsa le afima myaccount.google.com/security eye nàkpɔ egbɔ be Gbugbɔgaxɔ ƒe Telefon kple gotagome Gbugbɔgaxɔ Email (si womexɔ ɖe Gmail akɔnta ɖeka dzi o - le kpɔɖeŋu me, ProtonMail alo Outlook adrɛs) siaa le dɔ wɔm, eye nàta wò Google Backup Codes 10 siwo zãa zi ɖeka zi ɖeka, siwo ƒe xexlẽdzesi nye 8 ɖe pepa dzi.
• Se 4 - Ŋlɔ wò Emergency Recovery Sheet ɖe pepa ŋutɔŋutɔ dzi eye nàdzrae ɖo kple wò Passport / Birth Certificate: Ŋlɔ nu ɖe index card ŋutɔŋutɔ ɖeka si wodzra ɖo ɖe wò dedienɔƒe dzi: (1) Wò Apple/Google Account Email & Password, (2) Wò Telefon Lock-Screen Passcode / Google Password Manager 6-Digit PIN, (3) Wò Password Manager Master Password + Secret Key, kple (4) Wò 8-digit / 25-character Backup Recovery Codes.

--- .

Nutome ƒe xexlẽdzesi siwo ku ɖe nudzɔdzɔ kpatawo ŋu kple dɔwɔƒea ƒe ɖoɖowo¶

Ne wò passkey-mɔ̃wo bu le fififi, adzodada, alo afɔku ŋutɔŋutɔ aɖe ta la, wɔ ɖoɖo kple kpovitɔwo, wò asitelefon dzi dɔwɔƒe, kple nuƒlelawo takpɔhawo:

• United States kple Canada: Ƒo ka 911 ne woxɔ wò telefon kple kɔmpiuta si dzi woŋlɔa nu ɖo le adzodada me la, xɔ Kpovitɔwo ƒe Nyatakaka Xexlẽdzesi, bia tso wò ʋukula si be wòada fifiawo IMEI le GSMA Stolen Device Blocklist dzi esime wole SIM si woatsɔ aɖɔlii ɖem ɖe go, eye nàka nya ta tso passcode fifi siwo wozi ɖe ame dzi ŋu le FBI IC3 (ic3.gov).
• United Kingdom: Ƒo ka ** .999** na adzodada si le dɔ dzi vevie alo ** .101** na Kpovitɔwo ƒe Nuvlowɔwɔ Ŋuti Nuŋlɔɖi Xexlẽdzesi, eye nàgblɔ IMEI siwo wofi kple akɔntabubu ƒe mɔɖeɖe ɖe Action Fraud (0300 123 2040 / . actionfraud.police.uk).
• Europa Dukɔwo ƒe Habɔbɔ: Ƒo ka 112 le EU-dukɔwo katã me eye nàtsɔ fififi ƒe gbeƒãɖeɖe le se nu ayi na nutoa me kpovitɔwo be woatsɔ mɔ̃a ƒe ŋkɔ ɣiwo IMEI.
• Australia kple New Zealand: Ƒo ka 000 le Australia alo ** .111** le New Zealand la, bia tso wò asitelefon dzi be wòaxe mɔ na asitelefon si wofi la tɔ IMEI le networkwo katã dzi, eye nàƒo ka na IDCARE (1800 595 160).
• India kple Asia-Pacific: Ƒo ka 112, xɔ SIM kaɖi si wogbugbɔ ŋlɔ, eye nàxe mɔ na telefon si wofi la tɔ IMEI le dukɔa me godoo le ** .ceir.gov.in** (14422).

--- .

Nya siwo wobiaa amewo enuenu¶

Ne fiafitɔ aɖe fi nye iPhone alo Android telefon la, ɖe woate ŋu azã nye Passkeys atsɔ age ɖe nye gadzraɖoƒe, Google, alo crypto akɔntabubuwo mea?¶

Ao, menye negbe ɖe wonya wò lock-screen passcode hã alo zi wò biometric (`Face ID` / . `Fingerprint`). FIDO2 / WebAutn ƒe passkey ɖesiaɖe hiã Zãla ƒe Kpeɖodzinya (`UV`) . hafi telefon la ƒe xɔtunuwo ƒe dedienɔnɔ ƒe chip nade asi agbalẽ te be yeage ɖe eme. Ne fiafitɔa xɔ wò telefon esime womeʋui o gɔ̃ hã la, ne ège ɖe nyatakakadzraɖoƒe alo dɔwɔnu aɖe me kple passkey la, eʋãa wò telefon yeye Mo ƒe ID, Touch ID, alo Asibidɛ ƒe dzesiwo ƒe fotoɖeɖe. Be nàdzudzɔ abɔta-ƒutsotsoe fiafitɔ siwo nɔ ŋku lém ɖe ŋuwò nèŋlɔ wò PIN la, na wòawɔ dɔ Apple Fia Mɔ̃wo Takpɔkpɔ (`Settings > Face ID & Passcode > Stolen Device Protection`) kple Android Fififi Detection Lock / Dzesidede Ame ƒe Dzesidede (`Settings > Google > All services > Theft protection`), siwo zia biometric-ko ƒe kpeɖodzinana dzi le adzɔge tso aƒe gbɔ.

Nukatae nyatakakadzraɖoƒea bia tso asinye be matsɔ nye telefon awɔ QR code aɖe scan esi mezi "Sign in with a passkey" dzi le nye Windows PC dzi - togbɔ be passkey menɔ nye Windows PC dzi kpɔ o hã?¶

Esi nèwɔ nyatakakadzraɖoƒe ma ƒe mɔɖeɖe ƒe safui le wò fon dzi la, nyatakakadzraɖoƒea dzra aflaga aɖe ɖo tsɔ ɖo ŋku edzi be asitelefon dzi nyatakakadzraɖoƒea le asiwò. Ne ège ɖe eme tso kɔmpiuta dzi nyatakakadzraɖoƒe si me teƒea ƒe mɔzɔgbalẽ ma mele o la, nyatakakadzraɖoƒea adze dɔ gɔme FIDO Cross-Device ƒe Dzesidede (`Hybrid Transport` / . `caBLE`) ., si aɖe QR-dzesi aɖe afia ale be wò fon nate ŋu ade asi agbalẽ te be yeage ɖe eme to Bluetooth dzi. Ne wò fon bu la, zi edzi Te fli ɖe eme le QR code ƒe fesrea dzi eye nàzi edzi "Te mɔ bubu kpɔ" / "De asi eme kple nyagbe ɣaɣla". le nyatakakadzraɖoƒe si le ete la dzi.

Ne metutu passkey aɖe ɖa le nye... Apple Passwords app alo Google Password Manager, ɖe ema ɖea passkey la ɖa le nyatakakadzraɖoƒea ƒe server hã dzi le eɖokui sia?¶

Zi geɖe la, ao. Negbe ɖe nyatakakadzraɖoƒea kple nyagbegbɔgblɔdzikpɔla siaa do alɔ WebAutn Signal API ko hafi, nyagbe ɣaɣla aɖe tutu le wò nyagbegbɔgblɔ dzikpɔla me ɖea... ame ŋutɔ ƒe safui tso wò nudzraɖoƒe esime nyatakakadzraɖoƒea gakpɔtɔ lé... dutoƒo safui eye wòyia edzi le eƒom ɖe enu be wòawɔe. Ɣesiaɣi si nèbu mɔ̃a ƒe mɔzɔgbalẽ (abe kɔmpiuta si gbã alo YubiKey si bu ene) la, ge ɖe nyatakakadzraɖoƒea tɔ me Akɔntabubu ƒe Ðoɖowo > Dedienɔnɔ > Passkeys page eye nàtutu passkey entry si bu la le afima hã.

Ðe mate ŋu aɖo nye Passkeys katã ɖe duta alo atsɔ wo tso iPhone dzi (iCloud Keychain) yi Android-telefon dzi (Google Password Manager) alo 1Password / . Bitwarden?¶

Womate ŋu aɖo safuiwo ɖe ame si wometsɔ nya ɣaɣlawo ɣla o `.csv` spreadsheet elabena plaintext export ana ame ŋutɔ ƒe safui ɖesiaɖe nadze le malware me. Ke hã, ne míedze egɔme tso iOS 18.2+ kple Android 15+, Apple, Google, 1Password, kple Bitwarden doa alɔ... FIDO ƒe Nubabla `Credential Exchange Protocol (CXP)` (`Settings > Apps > Passwords > Export / Import`) hena nyatakakawo tsɔtsɔ yi teƒe bubu si wotsɔ nya ɣaɣlawo ŋlɔ. Le mɔ̃ xoxowo dzi la, ge ɖe wò nyatakakadzraɖoƒe siwo le etame le mɔ̃ yeyea dzi eye nàzi edzi "Tsɔ passkey yeye kpee". be nàŋlɔ passkey evelia ɖe wò vault yeyea me tẽ.

Nukae dzɔna ɖe nye passkeys dzi ne metrɔ nye iPhone Lock-Screen Passcode alo nye Android Screen Lock PIN?¶

Wò passkeywo gakpɔtɔ le dedie 100 le alafa me eye wogbugbɔa woƒe cloud escrow encryption key blana ɖe wò passcode alo PIN yeyea ŋu le wo ɖokui si. Lé ŋku ɖe wò PIN si nèzãna fifia kple wò PIN si do ŋgɔ enumake siaa ŋu vaseɖe esime mɔ̃awo katã nawɔ ɖeka.

Ðe wòle be matutu nyagbe si le nye akɔntawo me ne metsɔ Passkey kpee ko?¶

Le ezãla akpa gãtɔ gome la, . na ŋɔŋlɔdzesi 20 ƒe nyagbe ɣaɣla sesẽ aɖe si le etɔxɛ si wowɔ le vome si wodzra ɖo ɖe wò nyagbewo dzikpɔla me ɖe wò nyagbewo ƒe safuiwo xa, tsɔ kpe ɖe xexlẽdzesi 8 ƒe kɔpi siwo wota ŋu. Ne èdzra nyagbe si nèzãna le vome (alo YubiKey + si wota be woatsɔ agbugbɔ axɔe) ana wò OS-independent escape hatch ne èbu wò fon esime nèle mɔ zɔm kple Windows alo Linux kɔmpiuta si nèdo ko.

--- .

Mɔfiame siwo do ƒome kplii¶

• MFA lockout kple authenticator gbugbɔgaxɔ
• iPhone Fifi Mɔ̃ Takpɔkpɔ, gbugbɔgaxɔ safui lockout, kple Apple Account domenyinu kadodo xɔname
• Password manager ƒe mɔxexe, master password ƒe bu, kple vault gbugbɔgaxɔ
• Nu eve ƒe kpeɖodzi telefon xexlẽdzesi si wogbugbɔ zã to carrier kple SMS 2FA lockout
• Laptop alo telefon si wofi: adzɔge tutu kple akɔntabubu ƒe mɔxexe
• Session cookie hijacking, infostealer malware, kple passkey ɖeɖeɖa
• Xexlẽdzesi siwo woxɔna kpata le dukɔwo nu

--- .

Dzɔtsoƒewo kple dziɖuɖumegãwo ƒe mɔfiame¶

• FIDO Alliance & Xexeame Katã ƒe Nyatakakadzraɖoƒe Habɔbɔ (W3C): Nyatakakadzraɖoƒe ƒe Dzesidede (WebAuthn Dzidzenu 3) Nyatakakawo, Mɔ̃ Geɖewo ƒe Ðaseɖigbalẽwo (Synced Passkeys) vs. Mɔ̃ Ðeka (Device-Bound) Ðaseɖigbalẽwo, Kple Ðaseɖigbalẽwo ƒe Asitɔtrɔ Ŋuti Ðoɖo (CXP).
• Dukɔa ƒe Dzidzenuwo Kple Mɔ̃ɖaŋununya Ŋuti Nusrɔ̃ƒe (NIST) (United States): Agbalẽ Tɔxɛ 800-63B (Revision 4 / Suppl.): Digitál Dzesidede Mɔfiamewo - Dzesidede Kple Agbenɔƒe Dzikpɔkpɔ (Syncable Dzesidede kple Akɔntabubu Gbugbɔgaxɔ ƒe Sisiwo).
• Apple Platform Dedienɔnɔ Dziɖuɖumegãwo ƒe Nuŋlɔɖiwo: iCloud Keychain Escrow Xɔtuɖaŋu, Passkeys ƒe Ðekawɔwɔ, kple Akɔntabubu Gbugbɔgaxɔ Kadodowo (support.apple.com/en-us/102641).
• Google Dedienɔnɔ Blog & Android Dɔwɔlawo ƒe Nuŋlɔɖiwo: Passkey Nuwuwu-ɖe-Nuwuwu Encryption le Google Password Manager (Google Titan Keychain Escrow) kple Cross-Device Passkey Gbugbɔgaxɔ.
• Dukɔa ƒe Internet Dzi Dedienɔnɔ Dɔwɔƒe (NCSC) (United Kingdom) & Internet Dzi Dedienɔnɔ Kple Dɔwɔƒewo ƒe Dedienɔnɔ Dɔwɔƒe (CISA) (United States): Passkeys kple Phishing-Resistant MFA Dɔwɔwɔ kple Gbugbɔgaxɔ Mɔfiame.