renamePasskeyEncryptionKey

Renames a passkey encryption key's user-supplied label. The only mutable field on the row.

renamePasskeyEncryptionKey(
  id: ID!
  label: String!
): PasskeyEncryptionKey!

Arguments

renamePasskeyEncryptionKey.id ● ID! non-null scalar

renamePasskeyEncryptionKey.label ● String! non-null scalar

Type

PasskeyEncryptionKey object

A user's passkey-backed encryption keypair. The PRIVATE key never travels — it's derived in the browser from the passkey's PRF extension output (HKDF-keyed) and held only as a non-extractable CryptoKey for the duration of one operation. The server holds only the public key + the HKDF salt.