Revoke/change a passkey

Is it possible to revoke or change a passkey so a user can unshare a previously shared a passkey with someone.

Replies

Passkeys are standard WebAuthn credentials, and follow the revocation rules defined in the WebAuthn spec. To rotate a WebAuthn credential, you can trigger a new registration with the same userID as the existing credential. This will generate a new public/private key pair that overwrites the existing one on the user's devices. Then your server should stop accepting signatures using the old public key.

  • This is now covered in the Supporting passkeys developer documentation as well.

Add a Comment