“Passkeys,” the secure authentication mechanism built to replace passwords, are getting more portable and easier for organizations to implement thanks to new initiatives the FIDO Alliance announced on Monday.

  • @[email protected]
    link
    fedilink
    English
    57 hours ago

    The shared secret with my Vaultwarden server? Add mfa and someone needs to explain to me how passkeys do anything more than saving one single solitary click.

    • @[email protected]
      link
      fedilink
      English
      106 hours ago

      When a website gets hacked they only find public keys, which are useless without the private keys.

      Private keys stored on a password manager are still more secure, as those services are (hopefully!) designed with security in mind from the beginning.

    • @[email protected]
      link
      fedilink
      English
      107 hours ago

      Pass keys are for websites such as Google, Facebook, TikTok, etc. And then they go into what is currently your password manager or if you don’t have one, it goes into your device. You still have to prove to that password manager that you are, who you say you are, either by a master password of some sort or biometrics.