1961267 - Firefox prompts for passkey, no way to turn it off (disabled PW management doesn't affect behaviour)

Status: UNCONFIRMED

(Core :: DOM: Web Authentication, defect)

Description

[n8c]

Attachment: 2025-04-08 00_25_10.jpg

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0

Steps to reproduce:

Randomly (rarely, definitely not in most cases of pulling it up) on Amazon, Firefox will prompt me to make a passkey out of my normal login.
I can't link it to any specific behaviour, as I am Cookie-logged in as always.
Both screenshots provided have not seen a new active login before this showed up.

Actual results:

Firefox will prompt me to make a passkey out of my normal login.

Expected results:

Firefox (theoretically) knows that I have disabled the FF password management and should stfu and let KeePass do its thing.

Comment 1

[n8c]

Attachment: 2025-04-08 00_25_35.jpg

Comment 2

[n8c]

Attachment: 2025-04-15 13_00_20.jpg

Comment 3

[n8c]

I first took it as a one-off, but the prompt appeared again after 7 days.

I don't want none of that shit.

Comment 4

[n8c]

PS: I don't see this behaviour on any other site so far. Which is weird enough.

Comment 5

[n8c]

128.9.0esr (64-bit)

Comment 6

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Toolkit::Password Manager' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 7

[Johannes]

Passkeys work differently than passwords, so disabling the password manager will not affect this feature. Passkeys are tokens stored on your device that enable passwordless login.

This relatively new mechanism is already supported by some websites. On OS X, you can enable it via the configuration option security.webauthn.enable_macos_passkeys.

Comment 8

[n8c]

Status: UNCONFIRMED → RESOLVED
????
Sorry but nothing is solved.

From your post I understand passkeys aren't managed by the password settings by Mozillas standards. Ok, fine with me.

But then where is my option to not be annoyed by such prompts?
Am I just supposed to live with repeat prompts until I give in and add them as passkeys, with ever increasing counts of sites doing that? Because that sounds amazing!!

Comment 9

[Johannes]

Moved to Core DOM Web Authentication, feel free to move somewhere else if it does not fit.

Comment 10

[n8c]

Thx!

Comment 11

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:jschanck, could you have a look please?

For more information, please visit BugBot documentation.