• @ikidd
    link
    English
    1230 days ago

    I was reading a story about one of the inventors/designers of passkeys, and he felt the implementation was a fucking shitshow. Wish I could find that article again.

      • @[email protected]
        link
        fedilink
        English
        630 days ago

        Passkeys are a great option for people that don’t wanna deal with managing their passwords and have some else do it for them. That’s not everyone though, some prefer staying in control, so it should always stay optional.

        • @[email protected]
          link
          fedilink
          English
          4
          edit-2
          27 days ago

          Passkeys do one thing right. They are based on asymmetric keys as a proof of knowledge instead of transmitting the password.

        • @[email protected]
          link
          fedilink
          English
          329 days ago

          I’ve been using a password manager for ages, and passkeys for a long time now.

          What about passkeys is a loss of control? I’m 100000000% more likely to use them when supported, usernames/passwords are so janky, as are SMS/email-based 2FA (and the stupid “magic passcode” that makes you check your phone/email every time you sign in); for average users it greatly reduces the risk of phishing, etc.

          If I want to delete one I can do just that.

          Websites that require username/password + passkeys are annoying as hell though.

      • @[email protected]
        link
        fedilink
        English
        230 days ago

        I only keep it installed for service outages and breaking news. I don’t need an extra layer of bullshit to wade thru to see if Xbox servers are down.