So where do I keep my pass keys is the problem. They are in my password manager just like another password. So what's the point of having them because effectively, the passwords in the password manager and the passkey in the password manager offer the same UX to me? Except that at least I can memorize a password by heart just in case.

▲

john_strinlai a day ago | parent | next [-]

>They are in my password manager just like another password. So what's the point of having them because effectively, the passwords in the password manager and the passkey in the password manager offer the same UX to me?

same ux, different security properties.

>Except that at least I can memorize a password by heart just in case.

"just in case" should be a thought out recovery flow, rather than hoping that you remember the password of the account you need to access.

▲

xboxnolifes a day ago | parent [-]

The password is the recovery flow. What do you propose instead that isnt just a variation of having a password and a passkey?

▲

john_strinlai a day ago | parent [-]

a memorized password is not part of a well thought out recovery flow.

double triple emphasis on "memorized"

▲

xboxnolifes 21 hours ago | parent [-]

Ok, I write my password down. Now what?

	▲	john_strinlai 20 hours ago \| parent [-]
		the same advice as the last few decades: place it in a fireproof safe alongside your other important documents, like your passport and birth certificate.

▲

drdexebtjl a day ago | parent | prev [-]

That is the point. They stop you from memorizing it “just in case” and reusing it, and they force you to use a password manager.

For the average user, which doesn’t use a password manager, this is great. It means they can’t get phished. And it’s also great for the average password manager user, who keeps dozens of insecure and reused passwords in their vault because they manually thought of a password when signing up instead of randomly generating one.

If you’re already using a password manager and random passwords, the UX is designed to be the same. It’s just a way to get regular people to do this.

	▲	Telaneo 13 hours ago \| parent [-]
		> If you’re already using a password manager and random passwords, the UX is designed to be the same. In that case, they've completely and utterly failed.