Titanium Passkey

Titanium Passkey is an offline FIDO2 / WebAuthn credential provider for iPhone, iPad, and Mac. Every private key lives inside the Secure Enclave and never leaves it. Every sign-in is gated by Face ID or Touch ID, enforced in hardware.

WHY TITANIUM PASSKEY?

• Passkeys bound to silicon — never replicated to a vendor cloud you don't control

• No account, no sign-up, no subscription — install and use

• Works with every passkey-capable site: GitHub, Google, your bank, self-hosted apps

• A stolen phone signs nothing — biometric enrollment gates the private key at the hardware level

• Zero telemetry, zero analytics, zero tracking SDKs in the binary

• Sign in on any desktop — Windows, Mac, Linux, Chromebook. On the browser's passkey prompt, choose "Use a Device Nearby" / "Other Options" and scan the QR code with your iPhone. Your phone stays the authenticator; the desktop never sees your key.

HOW IT WORKS

Enable Titanium Passkey under Settings → Passwords → Use Passwords and Passkeys from. When a site requests a passkey, iOS routes the challenge to the extension. The extension wakes, Face ID or Touch ID unlocks the key inside the Secure Enclave, the assertion is signed on-chip, and handed back. You're signed in.

WEBAUTHN SUPPORT

• ES256 (COSE -7) over WebAuthn — the baseline every passkey-capable site supports

• PRF extension (hmac-secret) for encrypted data binding

• Conditional mediation — silently offer passkey sign-in without interrupting the user

• Fast authentication — skip the picker when only one passkey matches

STORAGE & KEYS

• EC P-256 keys created with kSecAttrTokenIDSecureEnclave — not extractable by the app, iOS, or Apple

• Gated by biometryCurrentSet + privateKeyUsage — re-enrolling Face ID invalidates keys

• Keychain marked AfterFirstUnlockThisDeviceOnly — excluded from iCloud, iTunes, and Finder backups

• Optional multi-device tier for iCloud Keychain sync, off by default, trade-offs explained in-app

PRIVACY

• The Credential Provider extension has no network entitlement — it cannot reach the internet

• No account, no email, no cloud

• No telemetry, no analytics, no ad identifiers

• Attestation uses the 'none' format — we don't uniquely identify your device to relying parties

• Anonymous crash reports only if you've opted in via iOS Settings

No subscriptions. No in-app purchases. Just passkeys, bound to silicon.