AsudoxDev
I never said anything about the phone not being encrypted by default. I am talking about the emergency mode iOS devices have.
Now that you mention it, does seem a bit like Louis as well lol
Correct, though it still is saved somewhere. Just like how TPMs in Computers can be exploited as well, this also can be. What I meant in my original comment was that the emergency mode did not clear that hardware chip's storage, which others said otherwise.
edit: corrected mistake according to ethan
You didn't read the article you linked to, did you?
The encryption by default you speak of is before the first unlock, that is, locked with something like a password or PIN. After the first unlock, the decryption key is stored in memory and your filesystem is pretty much vulnerable to anyone that can get access to the memory. That is why you can even unlock your phone with your face or fingers, because all that is a simple boolean value that indicates whether you logged in or not. You can't "generate" or get a key from your face nor fingers.
That does not encrypt your storage. It simply disables the biometric authentication methods. Which means they can see your stuff if they get into the phone via a exploit.
Bitwarden is an online password manager and no I don't consider self hosting it offline.
What madness caused this
Passkeys are only good if they aren't in a online password manager. They are better than TOTP 2FA in terms of security and phishing resistance. I see 2FA as a last resort when someone even gets into my password manager. Storing passkeys completely makes this useless, as I'm sure anyone that can log into my accounts would've done so by getting a hold of my unencrypted password manager database. Unless android provides a real offline way of storing passkeys in the device, I am not interested alot.
That guy looks like Mark Zuckerberg
Bitwarden. The UI is about to be updated to something more modern so that's no longer is an issue for most people. It's also open source, so yes.
The 10€ per year as the premium subscription is just unbeatable. You pay less than a euro per month for a reliable and robust password manager. And you don't even need the premium subscription, because almost everything is free. I honestly consider it a donation rather than a subscription.