IssueTracker

Component used:

Credentials

Version used:

1.3.0-alpha01 and prior versions as well

Devices/Android versions reproduced on:

Pixel 8

Example project:

https://github.com/android/identity-samples/tree/main/CredentialManager

Description:

When creating a new passkey on a device with multiple accounts, the account to link the passkey to by default seems to be chosen randomly.

Steps to reproduce:

1. Run the CredentialManager app on a device with multiple passkey eligible accounts
2. Attempt to create a new passkey and pay attention to the selected account at the bottom of the bottom sheet dialog
3. Close app, clear app data and repeat steps 1 and 2
4. If needed, repeat a few times always paying attention to the chosen account

Result:

A seemingly random, different account is chosen on every attempt. The same happens with apps installed from the play store

Expected:

The same account is chosen every time. That could be the account that was used to install the app or the default play store account.

Side note:

The chosen account is only mentioned very small at the bottom of the dialog and can easily be missed making it unclear to the user for what account they just created a passkey. I think the account should be highlighted more.

Example screenshots from my own testing using the steps outlined above:

See attached screenshots passkey1 and passkey2