| ▲ | ethin a day ago | ||||||||||||||||
> And yet you love passkeys? Yes. The security benefit can't be overstated. > How much will you love them when you're locked out of something you can't do without? I certainly wouldn't be happy if this did happen, but it would be my stupidity (or the stupidity of those who implemented it on the service/platform where the problem occurred) which I would blame more than the fault of the tool. I do keep all passkeys in Bitwarden now so that's something at least. | |||||||||||||||||
| ▲ | jmull a day ago | parent [-] | ||||||||||||||||
> The security benefit can't be overstated. Security benefit appears strongly overstated. Compared to using a password manager (including generated secure passwords for each account), there isn't a significant security benefit. passkeys require using a manager as well, so there isn't much point. > ...but it would be my stupidity... All people are stupid sometimes. A security flow that doesn't account for this very well isn't a very good security flow. (Related: everyone tends to be unlucky eventually, and, unfortunately, everyone becomes incapacitated/dies eventually. Security flows need to account for these as well. Not to mention that in my experience, no software company continues to offer a quality service at a reasonable price forever. You're lucky to get 10 years. Having access to my accounts tied to a single piece of software is likely to become a big pain at some point.) | |||||||||||||||||
| |||||||||||||||||