RSS Amplifier

Passkeys Substack · Jul 10, 2026

Why Apple passkey error 1004 tells you nothing

0
Sign in to vote or save

Vincent Delitz · Passkeys Substack

Here are this week’s topics that you don’t wanna miss out on!

🍎 Apple Passkey Error Codes: Complete Reference (2026)

🧩 WebAuthn vs. CTAP vs. FIDO2: Key Differences

Decode Apple's error codes

Apple passkey failures used to be a guessing game. For years almost everything bubbled up as a single generic code, 1004, which tells you a login broke but not why.

This guide maps Apple’s full error pipeline across iOS 26.2 and macOS 26.2, from the private ASCAuthorizationError numbers to the public codes your app actually sees. It shows how Apple has slowly pulled real signals out of that catch-all: 1005 when no credentials exist, 1006 for a duplicate, 1010 when the device has no passcode or iCloud Keychain.

There is even a twist the docs do not mention, where the detail you need shows up in a field nobody thinks to check. So the next time a passkey silently fails on iPhone, will you know if it is a user cancel, a config problem or a real bug?

Read More

WebAuthn, CTAP, FIDO2, passkey: four words for what feels like the same thing, and almost everyone mixes them up. This post draws the clean lines.

FIDO2 is the umbrella.

WebAuthn is the API you actually write code against, in the browser or a native app.

CTAP is the binary protocol that only kicks in when you talk to a roaming key over USB, NFC or Bluetooth, which means platform authenticators like Face ID skip it entirely.

The practical punchline: over 95 percent of passkey deployments never touch CTAP directly, and the common belief that hand-rolling CTAP gives you a nicer native experience is backwards. So are you about to build something the operating system already does for you?

Read More

You can memorize every Apple error code and draw the FIDO2 diagram from memory and still have no idea what your real users are doing at the login screen. Are they actually creating passkeys or quietly falling back to passwords every time? Corbado Observe shows the real passkey versus password split in your own funnel, so the theory finally meets what people do.

See what users actually pick

Our mission is to free the world from passwords to make the Internet a safer place - this can only be accomplished together.
Join our passkeys community to connect with other passkey enthusiasts, stay up-to-date, get implementation support and show your passkeys projects!

Join Passkeys Community

No posts

Read the original on passkeys.substack.com

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.