| ▲ | Telaneo 2 days ago | |
They're just text behind the scenes, so you can copy them if you really want to. KeepassX lets you do it, and got into a kerfuffle about it.[1] It's an impossible design. It's all just obfuscation, most of which is confusing to users. [1] https://github.com/keepassxreboot/keepassxc/issues/10407 | ||
| ▲ | robertlagrant 11 hours ago | parent [-] | |
> They're just text behind the scenes, so you can copy them if you really want to. KeepassX lets you do it, and got into a kerfuffle about it.[1] Yes - the kerfuffle is broadly I think the fact that it negates the main advantage of passkeys: people can't be tricked into pasting them into a fake login screen. > It's an impossible design. It's all just obfuscation, most of which is confusing to users. I agree - they're explained in a really odd way, and I think that's because they're a technology with multiple interaction patterns, rather than a single thing like a password. E.g. your fingerprint on your Mac is implemented as a passkey, or clicking on a browser passkey is also a passkey, or using a password manager via a different UI is also a passkey, or touching a Yubikey is also a passkey. The underlying mechanism (passkey) probably has been surfaced more than it should've been. | ||