293
Passkeys Explained: The End of Passwords (sentientrant.com)
submitted 10 months ago by to c/technology@lemmy.world
225 comments fedilink hide all child comments
 

Passkeys are built on the FIDO2 standard (CTAP2 + WebAuthn standards). They remove the shared secret, stop phishing at the source, and make credential-stuffing useless.

But adoption is still low, and interoperability between Apple, Google, and Microsoft isn’t seamless.

I broke down how passkeys work, their strengths, and what’s still missing

you are viewing a single comment's thread
view the rest of the comments
[–] 26 points 10 months ago (1 child)

Just don’t take away passwords + TOTP 2FA for those of us who are actually using it correctly.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 1 point 10 months ago*

    lets just hold the line of "the answer is always username/password + second factor".

    could be username/password + totp..

    could be username/password + passkey..

    if someone figures out my password, i dont lose everything..

    if someone steals my passkey, i dont lose everything..

    even if i do use the same password for everything, the second factor has it covered.

    (nobody will ever guess my password of ******** anyway!)

  • permalink
  • fedilink
  • source
  • parent