| ▲ | pavel_lishin 3 hours ago |
| The problem isn't the cost of replacing it, the problem is - how do you log in when all your passkey-bearing devices just got flushed down the toilet? |
|
| ▲ | remix2000 3 hours ago | parent | next [-] |
| How is that different from accidentally deleting your keepass database? Or forgetting your password? I think it’d be easier for me to forget than find myself trying to flush all my hw tokens… |
| |
| ▲ | pavel_lishin 3 hours ago | parent [-] | | I can back up my keepass database, and I can write down my passwords. | | |
| ▲ | faust201 3 hours ago | parent | next [-] | | Same way. A majority generally have a old phone that was already signed in to google. Or if they remember only Apple ID and password (one very difficult password) + sms. They can login on to a new phone. Everything is SYNCED immediately. What if you have a ransomeware that destroy everything on the same day your house and all backups burn down. And you cant get it from immutable backups as you wrote that decryption key in paper. And the bank will not allow you to access it as the govt deported you elsewhere. | |
| ▲ | megous 2 hours ago | parent | prev | next [-] | | I can back up my FIDO2 (non-)resident keys too. In the end it's just a piece of HW with some secret material inside. non-resident FIDO2 keys are easier to back up, because the master secret seed is fixed and shared for all origins and there's nothing stored on the key. | |
| ▲ | remix2000 an hour ago | parent | prev [-] | | I can get another hw key (if one of mine breaks, which I, surprisingly enough, have not yet managed to achieve) And since I have at least two at all times, the possibility of one of them breaking changes… not much really. Paper can burn or get tossed, backups files can go corrupt, and I really don't understand what is that extra risk hw keys introduce… There is at least one valid (in my opinion) reason to not like hw keys though: they cost real money to acquire, so you probably want an extra margin in your budget for the unlikely case they indeed decide to break. |
|
|
|
| ▲ | vablings 3 hours ago | parent | prev | next [-] |
| Copy pasting my other comment from an earlier thread FIDO2 USB Security key -> Bitwarden (With master password) -> Every other method (topt/password) I have 3 FIDO2 USB Security keys, One I carry with my persons at all times, one that stays with my main machine at all times and an offsite backup that is sitting in a friend's server, if my house burns down, I can either physically collect the key or use USB-IP to authenticate back into bitwarden and enroll a new key. (Actually all 3 are at home right now but that's ok) |
|
| ▲ | faust201 3 hours ago | parent | prev | next [-] |
| But a majority don't do that. For them let them use passkeys. If the possibility is once in 10 years then I am happy to do that. A majority is happy to do that. And yes, Google or Apple - dont say you should not keep passwords in your database and sync it with dropbox. DIY. Rest of us want convenience. |
|
| ▲ | 2 hours ago | parent | prev | next [-] |
| [deleted] |
|
| ▲ | vel0city 2 hours ago | parent | prev [-] |
| Its going to be hard to flush my desktop and my laptop down the toilet. |