Remix.run Logo
ilchalpenl 2 days ago

> Edit: One final consideration, my spouse and I share user/name passwords for some things (notably Pandora and our Amazon Prime account) since they don’t handle things like family logins well; how do both my wife and I use amazon or Pandora with passkeys? Do we each set up passkeys? How do I get her Pass if that’s not an option?

Lets say it is a android phone. Open amazon app. login in the usual user/password + 2FA (like with QRcode or phone). create passkey. done. This passkey would have been now synced to your google account.

Take next spouse phone. Open amazon website or app. try login it will try for passkey but cannot find it. so

- login in the usual user/password + 2FA (like with QRcode or phone). create passkey. done - Now this passkey would have synced to spouse google account.

In future, assuming you have apple or windows laptop. assume you have signed into Google (chrome). Now go to amazon. It will ask - shall I sign in with passkey. Yes, give your macos fingerprint or windows hello or password of that laptop. login Done magically. You dont even need to remember username or password.

Assuming you both have iPhones. You can sync the passkey to icloud account. And for every new iDevice it will be available.

The main bottleneck of passkey would be that all 3rd party sites will have another non-passkey way as backup to login. I have never seen a website that would say - remove all other methods and keep only passkey.

In a way passkey is 99% convenience. If a hacker would some how get your sms and password they can by-pass.

gortok 2 days ago | parent [-]

Thanks. One glaring issue I see is that right now police can’t ask you for your password in the USA (a violation of the right against self-incrimination). They can however get a search warrant for your device and your biometrics, and wouldn’t need your password if they can gain access through your pass key.

srparish 2 days ago | parent | next [-]

If you have it enabled, and you're in custody or at a border or similar, and have biometric auth enabled on your phone/computer, they can hold it up to your face or force you to put your finger on it to unlock it. Search warrant be damned.

ilchalpenl 2 days ago | parent [-]

According to Google,

> Approximately 90% people never go out of their country...

I am sure > 90% will happily love to have the convenience.

Yes, people like you can setup bitwarden etc. Nothing wrong. Passkey works for majority of people.

BTW, passkey can also be used without biometrics. It needs only the authentication of the device.

ilchalpenl 2 days ago | parent | prev | next [-]

> wouldn’t need your password if t

Once you talk about privacy/security then - I am not even sure you should do it here in HN - a bastion for encouraging Silicon valley practices.

In principle, you can remove biometrics and still use passkey (by using phone password only).

If you see my text, I wrote clearly - passkeys are great convenience + security - For the majority. People don't need to waste time in searching login names.

TBH, I was in a few Free Software Foundation Europe and linux conferences in the last year - in my view - at least half of them were using - passkey with iPhone or Android (including Playservices). So people have accepted the reality.

ilchalpenl 2 days ago | parent | prev [-]

> I see is that right now police can’t ask you for your password in the USA (a violation of the right against self-incrimination).

Hope they don't see your HN post. It is visible even without login.