- cross-posted to:
- [email protected]
- bitwarden
- cross-posted to:
- [email protected]
- bitwarden
Looks like a huge amount of security vendors are working to have a secure and open standard for passkey portability between platforms.
It is always good to see major collaboration in the security space like this considering the harsh opinions that users of some of these vendors have toward many of the others. I just wish apps and sites would stop making me login with username and password if passkeys are meant to replace that lol.
yay glorified, overcomplicated passwords!
i get hate for it but just use a password manager if you can’t juggle them?
I think it is quite the opposite for the end user. If apps/websites, begin to replace traditional password login with passkeys, this will be a measurable improvement for average consumers.
not really an improvement if you need extra software for it.
and cant just easily login.
In one sentence, you say, “just use a password manager”, on the next, “not really an improvement if you need extra software”. I’m not sure what argument you’re having, but neither one really addresses what this article is about.
This keeps the passkeys in the password manager (I use dashlane, it rocks, and synchronises the passkeys just like the passwords), but this new protocol allows you to change and export the passkeys to other password managers, preventing vendor lock in and allowing for transfer to another password manager.
Hope this clarifies things! And everyone should use a password manager of some kind; we should expect whatever site we’re using to be hacked, and the only way to be safe is to have a unique password per site.
password managers are optional though
Jesus fucking christ this is like listening to Jason from The Good Place try to argue a point about encryption.
just waiting for it to happen. many articles glowing it up, but only corporations proceeding with vendor lockin.
How about passkeys having solved phishing attacks?
i doubt it lol
I dont exactly like passkeys, but yes, from a technical standpoint, they do indeed solve Phishing
eh, phishing techniques will evolve whenever this becomes a thing, if it ever does.