Allow passkeys for insecure domain (localhost)

[Spomky]

We are happy to answer your questions about the code or discuss technical ideas.

Please complete the following checklist (by adding [x]):

• I have searched open and closed issues for duplicates
• This isn't a feature request
• This is not a report about my app not working as expected

---

Hi,

I would like to test an application with authenticators that are backed up like the ones managed by ProtonPass.
During the registration process, I am facing the following message:

failed to generate passkey: InsecureLocalhostNotAllowed

Please note that the browser (Chrome 126) considers the domain is secure (HTTPS with a trusted root CA).

❓ Question: How to allow the creation of passkeys on localhost? Is there any option to turn on/off?

[Salamafet]

Same here on Firefox 131.0.3 (aarch64)