▲ 39 ▼ Passkeys are a trap. Do not use them. (nonfunctional.substack.com) submitted 3 days ago by cm0002@toast.ooo to c/cybersecurity@infosec.pub 19 comments fedilink hide all child comments
[–] TheButtonJustSpins@infosec.pub 7 points 3 days ago (5 children) So, if Bitwarden, all good? permalink fedilink source parent hideshow 5 child comments replies: [–] 4am@lemmy.zip 14 points 3 days ago Well…for now? Bitwarden looking to enshittify lately. But yes right now Bitwarden passkeys work great across multiple devices desktop and mobile. Been using them for a number of years now. permalink fedilink source parent [–] SW42@lemmy.world 6 points 3 days ago (2 children) I use vaultwarden with the bitwarden clients on my devices. Works a treat. Make sure you know what you’re doing and have an effective backup strategy if you decide on this! permalink fedilink source parent hideshow 2 child comments replies: [–] TheButtonJustSpins@infosec.pub 4 points 2 days ago (1 child) I'm pretty confident in my backups, but passwords are just too important for me to risk, especially since I've started using unique usernames and email addresses for accounts. permalink fedilink source parent hideshow 1 child comment replies: [–] SW42@lemmy.world 4 points 2 days ago Great opsec! I also have a catch all domain for usernames and use bitwarden generated complex passwords. I have a local backup and two off-site backups that themselves have redundancy so I should be fine. I hope :) permalink fedilink source parent [–] moldy_rice@piefed.keyboardvagabond.com 1 point 2 days ago KeePass. permalink fedilink source parent
[–] 4am@lemmy.zip 14 points 3 days ago Well…for now? Bitwarden looking to enshittify lately. But yes right now Bitwarden passkeys work great across multiple devices desktop and mobile. Been using them for a number of years now. permalink fedilink source parent
[–] SW42@lemmy.world 6 points 3 days ago (2 children) I use vaultwarden with the bitwarden clients on my devices. Works a treat. Make sure you know what you’re doing and have an effective backup strategy if you decide on this! permalink fedilink source parent hideshow 2 child comments replies: [–] TheButtonJustSpins@infosec.pub 4 points 2 days ago (1 child) I'm pretty confident in my backups, but passwords are just too important for me to risk, especially since I've started using unique usernames and email addresses for accounts. permalink fedilink source parent hideshow 1 child comment replies: [–] SW42@lemmy.world 4 points 2 days ago Great opsec! I also have a catch all domain for usernames and use bitwarden generated complex passwords. I have a local backup and two off-site backups that themselves have redundancy so I should be fine. I hope :) permalink fedilink source parent
[–] TheButtonJustSpins@infosec.pub 4 points 2 days ago (1 child) I'm pretty confident in my backups, but passwords are just too important for me to risk, especially since I've started using unique usernames and email addresses for accounts. permalink fedilink source parent hideshow 1 child comment replies: [–] SW42@lemmy.world 4 points 2 days ago Great opsec! I also have a catch all domain for usernames and use bitwarden generated complex passwords. I have a local backup and two off-site backups that themselves have redundancy so I should be fine. I hope :) permalink fedilink source parent
[–] SW42@lemmy.world 4 points 2 days ago Great opsec! I also have a catch all domain for usernames and use bitwarden generated complex passwords. I have a local backup and two off-site backups that themselves have redundancy so I should be fine. I hope :) permalink fedilink source parent
[–] moldy_rice@piefed.keyboardvagabond.com 1 point 2 days ago KeePass. permalink fedilink source parent