293
Passkeys Explained: The End of Passwords (sentientrant.com)
submitted 10 months ago by to c/technology@lemmy.world
225 comments fedilink hide all child comments
 

Passkeys are built on the FIDO2 standard (CTAP2 + WebAuthn standards). They remove the shared secret, stop phishing at the source, and make credential-stuffing useless.

But adoption is still low, and interoperability between Apple, Google, and Microsoft isn’t seamless.

I broke down how passkeys work, their strengths, and what’s still missing

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 10 months ago*

lets just hold the line of "the answer is always username/password + second factor".

could be username/password + totp..

could be username/password + passkey..

if someone figures out my password, i dont lose everything..

if someone steals my passkey, i dont lose everything..

even if i do use the same password for everything, the second factor has it covered.

(nobody will ever guess my password of ******** anyway!)

  • permalink
  • fedilink
  • source
  • parent