Credential manager

Asked on 06/13/2025

2 searches

The concept of a "credential manager" was discussed in several sessions at WWDC, particularly in relation to passkeys and their management. Here are some key points:

  1. Credential Manager API Enhancements: The credential manager API has been enhanced to support automatic passkey upgrades, fill time-based verification codes, and fill usernames, passwords, or one-time codes into any text field. These improvements are part of the existing credential manager API, and developers can add support for these features by updating their info plist and using the matching APIs. This was discussed in the session Streamline sign-in with passkey upgrades and credential managers.

  2. Keeping Passkeys Up-to-Date: New APIs have been introduced to ensure that credential managers are informed about changes to account information, such as updated usernames or passkey removals. This helps maintain credential accuracy and prevents confusion during sign-in. This was covered in the session What’s new in passkeys.

  3. Passkey Management Endpoints: Implementing well-known URLs for passkey management endpoints allows credential managers to guide users toward adopting passkeys for services. This feature is designed to make passkey upgrades discoverable directly from credential managers. More details can be found in the session What’s new in passkeys.

These sessions highlight the ongoing efforts to streamline authentication processes and enhance security through the use of passkeys and credential managers.