myPasskeyEncryptionKeys

All non-revoked passkey encryption keys for the calling user. Used by Account → Security to render the management list. Recovery-tier rows (is_recovery_tier=true) are intentionally included: the dashboard hides them from the user-facing list and surfaces them only in the recovery diagnostic panel.

myPasskeyEncryptionKeys: [PasskeyEncryptionKey!]!

Type

PasskeyEncryptionKey object

A user's passkey-backed encryption keypair. The PRIVATE key never travels — it's derived in the browser from the passkey's PRF extension output (HKDF-keyed) and held only as a non-extractable CryptoKey for the duration of one operation. The server holds only the public key + the HKDF salt.