Is it possible to revoke or change a passkey so a user can unshare a previously shared a passkey with someone.
Revoke/change a passkey
Add a Comment
Is it possible to revoke or change a passkey so a user can unshare a previously shared a passkey with someone.
Passkeys are standard WebAuthn credentials, and follow the revocation rules defined in the WebAuthn spec. To rotate a WebAuthn credential, you can trigger a new registration with the same userID as the existing credential. This will generate a new public/private key pair that overwrites the existing one on the user's devices. Then your server should stop accepting signatures using the old public key.
This is now covered in the Supporting passkeys developer documentation as well.