Passkey’s are good in theory. But the amount of them that have implemented incorrectly and don’t save. Or can’t find the passkey and let you just input a password or email a link is dumb.
I’m sticking with MFA using a different service for my MFA from my password manager.
I’ll maybe use passkey’s for more sensitive information like banks.
My issue with passkeys is that they’re tied to devices and ecosystems, and I don’t always use the same devices or browsers. I also want to keep work and personal stuff separate. I deliberately store my passwords and MFA in different services so one breach doesn’t expose both.
I use different systems for different things. I sometimes work from home and pay bills at work, but I absolutely don’t want personal access stored on my work machine.
I’ve also had passkeys fail to register properly and had to remove them and start over. Even Microsoft documents registration issues.
Maybe passkeys will get there, but between setup issues and keeping everything working across devices and browsers, they’re not as simple as they’re made out to be. I prefer having control over where my credentials are stored and backed up. Everyone is different, but this new passkey push is not a good fit for me until things get smoothed out.
Passkey’s are good in theory. But the amount of them that have implemented incorrectly and don’t save. Or can’t find the passkey and let you just input a password or email a link is dumb.
I’m sticking with MFA using a different service for my MFA from my password manager.
I’ll maybe use passkey’s for more sensitive information like banks.
I have literally never had this problem. Passkeys are a strictly defined protocol as far as I’m aware.
I’d be really curious to know what services you’ve used that had this problem. Or what hardware you tried to save it on that didn’t work.
And yeah, implementing passkeys but allowing login with a password or email link is just wrong. No defending that.
My issue with passkeys is that they’re tied to devices and ecosystems, and I don’t always use the same devices or browsers. I also want to keep work and personal stuff separate. I deliberately store my passwords and MFA in different services so one breach doesn’t expose both.
I use different systems for different things. I sometimes work from home and pay bills at work, but I absolutely don’t want personal access stored on my work machine.
I’ve also had passkeys fail to register properly and had to remove them and start over. Even Microsoft documents registration issues.
Maybe passkeys will get there, but between setup issues and keeping everything working across devices and browsers, they’re not as simple as they’re made out to be. I prefer having control over where my credentials are stored and backed up. Everyone is different, but this new passkey push is not a good fit for me until things get smoothed out.
For your specific use case I recommend Yubikey for for passkey storage. It works everywhere a local device-stored passkey works but it’s portable.
It’s what I personally use for the exact reasons you describe