macos – Once I use a passkey from iCloud Keychain to log in to a different account, does it at all times ask for my password, biometrics, or safety key?

Testing the above Macbook, I used to be capable of log in to Google utilizing a saved passkey, with out offering biometrics or password.

Additional analysis

1. “Consumer Verification” is non-compulsory for passkeys / WebAuthn. It is just required if the service (e.g. Google) requires it. On this event, Google didn’t require it.

2. My 2017 MacBook doesn’t have Contact ID, Face ID, or one other biometric sensor.

3. Apparently, when biometrics are identified to be unavailable, Apple might select to skip consumer verification. No less than if the service didn’t require it. This may occasionally additionally occur when a brand new MacBook is related to an exterior show, and the lid has been closed.

I count on that if Google requested me for consumer verification, the MacBook would ask for my password. I.e. it might not out of the blue fail, nor would it not mislead Google.

Sources:

Present documentation means that both biometrics or a “passcode” is required. Nevertheless, we discover that is typically not true.

macOS 15: Register to an account with a
passkey

1. On the account sign-in web page, enter your account identify, then click on the account identify area.

2. Click on your account within the checklist of strategies.

3. Do one of many following:

   • When you have Contact ID in your Mac: Place your finger on the Contact ID sensor.

   • When you have an iPhone or iPad: Click on Different Choices, click on “Passkey from close by system”, then click on the QR code.

     Word: Bluetooth® should be turned on in Settings > Bluetooth in your iPhone or iPad. Bluetooth should even be turned on in your Mac.
     See Flip Bluetooth on or off.

   • Exterior safety key: Click on Different Choices, click on “Safety key”, then comply with the directions onscreen.