[jeroenhd]

Can we have this but self-hostable and open source, please? Something like Bitwarden that you can stuff onto your own device? I know there are hosted services for handling auth on the server backend, but what about the other way around?

I use Krypton but that's not maintained (and already broken on some websites like Github). I trust the secure storage module of my phone and I trust my computer's TPM, unlike many other Linux users; surely it should be possible to integrate with the OS somehow to make it secure, right? The last example I saw used USB over IP to inject a virtual FIDO device, which works great, but the implementation is clearly not ready for prime time.

[stavros]

Yes, you can. It's an open standard. Bitwarden can (and probably will) just support it.

[oezi]

I don't see how that would work without integration into browsers.

[stavros]

It won't, there is integration into browsers for this right now.