Samsung Galaxy fingerprint · PRF key derivation
Creates a platform authenticator credential (fingerprint). The WebAuthn PRF extension derives the wrapping key on-device. Ciphertext is re-wrapped to that key; the one-time setup wrap is then wiped.
Required: Android Chrome, screen lock / fingerprint enrolled, Google Password Manager. Do this on the Galaxy that will unlock the vault.