ENCRYPTING FILES WITH PASSKEYS AND AGE

Summary from the TLDR InfoSec newsletter

Typage 0.2.3 introduces passkey-based file encryption using the WebAuthn PRF extension, allowing users to encrypt files that can only be decrypted with biometric authentication or hardware security keys. The implementation creates a new age recipient format (fido2prf) that binds each encrypted file to specific hardware credentials, requiring both the encrypted file and physical access to the authenticator for decryption. Files encrypted on one device can be decrypted on another through synced passkeys. A companion CLI plugin also enables this functionality with FIDO2 hardware tokens outside the browser.