desktop icon indicating copy to clipboard operation
desktop copied to clipboard
verified publisher icon zen-browser

macOS passkeys not working on certain websites, such as Duo Authentication

Open qaisarsulaiman opened this issue 8 months ago • 13 comments

Captchas

  • [x] I have read the instructions.
  • [x] I have searched existing issues and avoided creating duplicates.
  • [x] I am not filing an enhancement request.
  • [x] I have checked that this issue cannot be reproduced on Mozilla Firefox.
  • [x] I have checked that this issue can be reproduced once I removed all my Mods and Custom CSS.

What happened?

Summary:

When attempting to use macOS passkeys (Touch ID) in Zen Browser, some websites correctly trigger the native biometric prompt. However, other websites, such as the Duo Security login for USC, display a security key prompt but fail to correctly invoke the system dialog for biometric/passkey interaction.

This issue appears specific to certain WebAuthn implementations, like Duo Security’s. Other implementations, such as Google's, works just fine.

Steps to Reproduce:

  1. Open Zen Browser on macOS.
  2. Navigate to a site that supports WebAuthn (e.g., Duo Security for USC).
  3. Attempt to authenticate using Touch ID or macOS passkeys.

Image

Image

Version

1.11.3b

What platform are you seeing the problem on?

macOS - aarch64

What component is this issue related to?

Security

Relevant log output if applicable

qaisarsulaiman avatar Mar 29 '25 20:03 qaisarsulaiman

Try reinstalling zen

mr-cheffy avatar Mar 30 '25 14:03 mr-cheffy

Try reinstalling zen

Didn't work for me unfortunately

qaisarsulaiman avatar Mar 31 '25 05:03 qaisarsulaiman

I downloaded Zen today and ran into this issue on Stripe.

MacBook Air M2. Zen 1.10.3b (Firefox 136.0.4) (aarch64)

Image

garikAsplund avatar Apr 01 '25 05:04 garikAsplund

This also seems to occur in AWS as well

Wolfteam avatar Apr 05 '25 18:04 Wolfteam

Same issue as https://github.com/zen-browser/desktop/issues/6999

qaisarsulaiman avatar Apr 15 '25 22:04 qaisarsulaiman

What about now?

mr-cheffy avatar Apr 15 '25 22:04 mr-cheffy

Just updated to 1.11.3b, Stripe is still a no-go

garikAsplund avatar Apr 15 '25 22:04 garikAsplund

Same here, 1.11.3b still does not support Duo Authentication.

qaisarsulaiman avatar Apr 15 '25 22:04 qaisarsulaiman

Same issue as #6999

This is NOT the same issue. I'm using Windows, not macos. And the issue I reported exhibit different symptoms. #6999 should be re-opened.

mxxcon avatar Apr 16 '25 03:04 mxxcon

Is it only on certain websites? That means it's that site's issue, not zen's.

mr-cheffy avatar Apr 16 '25 15:04 mr-cheffy

Is it only on certain websites? That means it's that site's issue, not zen's.

Yes, it is only on certain websites. However, it works on Firefox. This may be an oversimplification, but it seems that logins, like Google, where the passkey is the login method, work fine. But 2FA, like Duo, where the passkey isn't the actual login (a password is, but the 2FA requires TouchID) doesn't work. Again, this may be an oversimplification, because I'm not sure how login methods to AWS and Stripe work, and some people reported that above.

qaisarsulaiman avatar Apr 16 '25 15:04 qaisarsulaiman

Fyi, at least for AWS:

This is resolved in Firefox 139 for users on macOS 14.5+.

from here

I can confirm that AWS passkey doesn't work on FF 137 and does work on FF 139 (nightly). So should be resolved whenever Zen updates to FF 139.

joebraha avatar Apr 24 '25 02:04 joebraha

Hi, @qaisarsulaiman. I'm Dosu, and I'm helping the desktop team manage their backlog. I'm marking this issue as stale.

Issue Summary:

  • The issue involves macOS passkeys not working on certain websites using Zen Browser version 1.11.3b.
  • Attempts to reinstall Zen Browser did not resolve the problem.
  • Similar issues were reported by other users on different websites.
  • A resolution was suggested by updating Zen Browser to Firefox 139 for macOS 14.5+.

Next Steps:

  • Please confirm if this issue is still relevant to the latest version of the desktop repository by commenting here.
  • If no updates are provided, the issue will be automatically closed in 7 days.

Thank you for your understanding and contribution!

dosubot[bot] avatar May 25 '25 16:05 dosubot[bot]

Hello,

I have the same issue on every website where I used to use TouchID as Passkey (AWS, Github, Google, …)
I tried to reinstall but without success.

My current version: 1.13.2b (Firefox 139.0.4) (aarch64)

Could you re-open the ticket ?

Thanks

baptiste-mnh avatar Jun 23 '25 13:06 baptiste-mnh

I'm also having this issue; for me it fails on macOS Sequoia 15.6.1 (24G90) using Bitwarden. Zen version is 1.15.4b (Firefox 142.0.1) (aarch64)

thrzl avatar Sep 06 '25 02:09 thrzl

Hello guys, same thing here with Jumpcloud website

Version of Zen: 1.15.4b (Firefox 142.0.1) (aarch64)

mde-pach avatar Sep 08 '25 11:09 mde-pach