Zdarec @halvamatic
I wrote short experiences here - in recent post labeled: Trezor 7 marketing
Does Trezor inform the user whether the current login is a passkey or a U2F?
Well, you can find out that easily - when it asks for username & password + “FIDO2” key, than it is most likely legacy U2F. Rare example is AppleID, where it asks for user & password + Security Key, but it is actually FIDO2 / CTAP2 / Resident credential. I’m not sure, but it is probably intentional, if you lose Security Key and you don’t have any Trusted Device (i.e. AppleID is lost forever, there are no exceptions possible, read Reddit - forget about Apple’s Recovery key, Recovery contacts… your access is lost forever), you can still use Find my.
Another way to tell if Resident credentials are being stored in your FIDO2 HW key is by CTAP 2.1, which is not supported by Trezor. But you have trezorctl command to list and backup stored credentials. They are encrypted by your “SEED” and Passpharse is ignored in this case. So personally, in case of Model T without Secure Element, i prefer SD card encryption.
As you can backup those FIDO2 encrypted credentials (NOT wallet backup aka SEED!) safely to cloud and restore when needed, there is actually no storage limit. For comparison older firmware of Yubikey supports 25 credentials, newer firmware v5.7.1 supports 100 credentials, GoTrust 30 credentials… Anyway, Passkeys are still pretty rare, only major/bigger companies offer them. Hopefully it will improve in upcoming years.
Will I be able to use Trezor anywhere I can use a Yubikey for example?
No. For example it works for MojeID, but it is useless for government services (not FIDO 2 L1/L2 certified EAL6+, no support for Attestation to my knowledge yet).
Does the Trezor Safe 7 support NFC?
I heard that TS7 should be NFC ready in future, not now. But NFC is also a thing you want/need for Android & Apple devices. Again plus points for GoTrust and YubiKey.
Anyway, i’m big fan of Trezor’s FIDO2 application 