I hate passkeys because they're always tied to a specific account or a device like a phone. I hate being dependent on phones/devices. That being said I know they solve a lot of problems so....

I still prefer a good password written down in a paper book, with multiple methods of 2FA. But I know there are attack vectors for that.

▲

blackcatsec 2 hours ago | parent [-]

Syncable passkeys are a thing which the OP addressed. Apple, Bitwarden, and other password managers all implement syncable passkeys. In fact, I just did an upgrade of my iPhone 15 Pro Max to an 18 Pro Max and all of my passkeys came along with the upgrade.

▲

TrueDuality 2 hours ago | parent | next [-]

I don't think it's appropriately addressed. The apple ecosystem has really good syncing between devices but only when they share an iCloud account. What happens when your work mac isn't permitted to use your personal account? What happens when your company issued password manager and your personal one fights? What happens when your company issued device is an Apple device AND you have to use a mandatory password manager from the company?

The problem to me is that passkeys assume the user owns the device and CAN choose to make a single store authoritative for their credentials. The only professional environments I've encountered that haven't/wouldn't hit this issue are ones small enough that they don't really have device or security governance in place which you can't use as a secure reference baseline.

▲

edoceo 2 hours ago | parent | prev [-]

Can they go from the 18 Pro Max to a Windows 11 device? Or to an Android device? Genuinely curious about the portability.

	▲	jeroenhd 42 minutes ago \| parent [-]
		I don't think Apple bothered to implement passkey support in their Windows iCloud password implementation yet. You can log in by scanning a QR code with your phone, though. Or you can use a different passkey provider that does work cross-platform. You don't have to use the one built into your phone.