100% correct takedown of the "Trap" article

Do passkeys have issues? Sure. Most of them are UX and are being worked on. As a user, I 1000% immediately register a passkey when a site or app offers it as at least on iOS and macOS, it is a superior user experience IMO and more secure. I never worry if I'm getting prompted for a Passkey, am I on the right site?

Also the remote connect functionality of modern browsers and mobile operating systems makes it trival if I need or want to sign into a personal account on my work PC where my personal passwords are not sync'd. Need to get into my personal GMail in an incognito window at work? No problem at all.

Anti-Passkey folks are just people who want to be against something to be against it

▲

origini 2 hours ago | parent | next [-]

Google and other services like PayPal make Passkeys default if you generated one.

Now they expect you to always use them to login on all devices.

I had to remove my passkey from one device for these services because i also use a PasswordManager and I do not trust my local chrome installation to just manage my passkey.

I want to have a Password Manager which I need to unlock when I use it. I also want to keep my 2fa and not break it due to passkey usage.

GitHub was also super shitty with it, suddenly a passkey broke my YubiKey login...

▲

calgoo 2 hours ago | parent | prev | next [-]

One of the bigger issues with passkeys has been that they get locked to one provider (like apple in your case). Now i HAVE to use an Apple device to unlock passwords, same with Google and Android. Its very much all eggs in one basket.

If it was easy to migrate between services, then i would be a lot more open to using passkeys.

▲

mixdup 2 hours ago | parent | next [-]

It's fairly easy to export/transfer passkeys (I think, I've never actually done it)

Also, many if not all of the sites I've got passkeys setup with support multiple keys, which I sometimes take advantage of. For example I've got a passkey into my Google account in my Apple account ecosystem but I also have a physical Yubikey setup as a Passkey device, in case I were to get locked out of my Apple account

	▲	alterom an hour ago \| parent [-]
		>It's fairly easy to export/transfer passkeys (I think, I've never actually done it) >I've never actually done it You can't be serious. If it's easy, go do it, find out, and come back here to tell us about it.

▲

calgoo 2 hours ago | parent | prev | next [-]

Too add to my own comment: I know that its coming, but until i can export to something like. keepass and not a commercial entity then i don't consider it ready.

	▲	timmyc123 an hour ago \| parent \| next [-]
		Many credential managers support migration. See https://whatarepasskeys.info.
	▲	2 hours ago \| parent \| prev [-]
		[deleted]

▲

linolevan 2 hours ago | parent | prev [-]

What is hard about migrating between password managers? At least on MacOS you can just open passwords and export all to another app?

	▲	secabeen 2 hours ago \| parent [-]
		The problem is that they determine the other apps that are supported. There is no "generic" export.

▲

user43928 2 hours ago | parent | prev | next [-]

I think PassKeys are great.

On my MacBook with the latest macOS I still can't use them.

I use Brave and 1Password. Clicking the Use Passkey button typically results in some Chrome Bluetooth permission dialog rather than accessing my PassKeys.

I tried to look into this once or twice with no success.

I suspect macOS is at fault. Apple does not seem to care about getting basic functionality right.

To this day Universal Clipboard between the MacBook and my iPhone does not work half of the time.

▲

nateb2022 2 hours ago | parent [-]

> To this day Universal Clipboard between the MacBook and my iPhone does not work half of the time.

Do you have bluetooth disabled half of the time?

	▲	user43928 2 hours ago \| parent [-]
		No. Ethernet, WiFi, and Bluetooth are all on. I believe a reboot sometimes restores functionality. Also, testing now showed that they connect successfully and copying from the Mac to the phone even works. Just not the other way around.

▲

dahrkael 2 hours ago | parent | prev | next [-]

Let's hope your iphone doesn't get stolen or smashed and your beloved passkeys lost

▲

mixdup 2 hours ago | parent | next [-]

Well, they're synchronized to my Apple account so that's not an issue. They're available on all of my Apple devices, or even ones I don't have right now that I log into in the future

Plus, none of the sites that I use passkeys for would I be locked out. They all have account recovery procedures just like if I forgot my password. And, finally, for the important ones like my Google account (where my email lives) I have other non-Apple devices like a Yubikey setup as additional Passkey/FIDO authenticators

	▲	HotGarbage an hour ago \| parent \| next [-]
		You have one Apple device that gets lost. You buy another and try to log in. Apple expects you to approve the login with the lost device. What now?
	▲	xigoi an hour ago \| parent \| prev [-]
		> or even ones I don't have right now that I log into in the future How do you log in without having the passkey?

▲

dcrazy 2 hours ago | parent | prev [-]

Why would they be lost? They are synced to iCloud Keychain, which is E2E encrypted.

▲

unethical_ban 2 hours ago | parent | prev [-]

It's just not a replacement for TOTP and password entirely. It's a shortcut, a super-cookie that is more secure. If I lose the device that has my passkey, I need a way to access my account from another device.

One might say "just use a password/credentials manager", but all these passkey prompts don't emphasize that you should use one that is not tied to hardware, or that you should backup your passkey to a thumb drive, or anything like that.

Same reason I hate TOTP that is tied to a device. If you require me to have proprietary 2FA apps on my phone to login to your account, I don't use 2FA. Looking at you, Steam.