189
The War on Passwords Is One Step Closer to Being Over (www.wired.com)
submitted 2 years ago by to c/technology@lemmy.world
127 comments fedilink hide all child comments
 

“Passkeys,” the secure authentication mechanism built to replace passwords, are getting more portable and easier for organizations to implement thanks to new initiatives the FIDO Alliance announced on Monday.

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 2 years ago (4 children)

You can share passwords without the server seeing them. Many managers don't but there's nothing infeasible there. You just have a password to unlock the manager. Done.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 5 points 2 years ago (3 children)

    What I'm getting at is that a web server has a password, in some form. And so if that site gets breached, your password itself may not get leaked, but the hash will. And if the hash is a common hash, then it can be easily cracked or guessed.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 9 points 2 years ago (1 child)

    Ultimately I'm pro passkey but when it comes to password managers: if the hash of your vault is easy to crack you've fucked up big time. There shouldn't be any way to crack that key with current tech before the sun explodes because you should be using a high entropy passphrase.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •