293
Passkeys Explained: The End of Passwords (sentientrant.com)
submitted 10 months ago by to c/technology@lemmy.world
225 comments fedilink hide all child comments
 

Passkeys are built on the FIDO2 standard (CTAP2 + WebAuthn standards). They remove the shared secret, stop phishing at the source, and make credential-stuffing useless.

But adoption is still low, and interoperability between Apple, Google, and Microsoft isn’t seamless.

I broke down how passkeys work, their strengths, and what’s still missing

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 10 months ago (6 children)

There’s a hassle?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 8 points 10 months ago (4 children)

    Every time I was prompted to use one by plugging my phone in to my computer nothing happened. That was a little over a year ago.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 6 points 10 months ago (3 children)

    It's been a very seamless experience with Bitwarden. Pretty much "click passkey, now logged in".

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 3 points 10 months ago (2 children)

    I mean when I was trying to set one up. I wasn't ever prompted to use a password manager. It just said to plug my phone into my computer. I did. And it didn't detect anything. With user experience in setup that poor I don't trust them yet.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [+] 1 point 10 months ago* (last edited 1 month ago) (1 child)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 10 months ago

    I don't know what to tell you. Multiple sites and services asked if I wanted to set up a passkey, every time I got prompted to plug my phone in via USB, and nothing happened when I did. At no point in the process did it give me a QR code or ask me if I wanted to set one up through a password manager instead of a phone. I didn't do anything special or incorrect. I followed the normal prompts they gave me.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 10 months ago

    I haven't even bothered into understanding what passkeys are (I know, I should check it out thoroughly) but I think that at its core it requires your phone, and as I like messing around with my hardware installing custom roms and rooting I suppose this method will be pursued by Google so, just as NFC payments, I don't give a single fuck about it 🤣

  • permalink
  • fedilink
  • source
  • parent