April 2025 | Nydia Passkey Holder Progress Report:
Features 
Nydia is now available for Safari ![]()
Users can now synchronize their passkeys across three browsers — Chrome, Firefox, and Safari 𐂷
Improvements and bug fixes 
The WebAuthn injector has undergone a comprehensive architectural redesign.
It now implements proper prototype inheritance for WebAuthn response objects using Object.setPrototypeOf and replaces the entire navigator.credentials object instead of just overriding individual methods.
This new injection approach ensures correct prototype chains for accurate instanceof validations. Most objects are now created atomically — properties and methods are defined simultaneously within a single object literal and integrated directly into the appropriate prototype chain ![]()
Ultimately, this implementation more closely simulates the behavior of actual hardware authenticator device. I guess.
Nevertheless, having separated Safari into its own repository, the Chrome and Firefox injector is currently outdated. I’m holding off on the update, prioritizing extensive tests across WebAuthn playgrounds as well as practical, field-based scenarios to validate results fully.
Link to repo worked on this month:
Goal for the next month:
- Enhancing WebAuthn’s attestation mechanisms.