I mean the desire to trap seems to be among the big corporations already.

I keep seeing major players promoting their own apps over standard TOTP, which I guess could be seen as a sort of proprietary passkey. Shopify, Google, Microsoft, and more, they all want you to download their app for MFA, instead of using a very open format.

As someone who works in IT, I just can't even imagine myself doing this. I have probably around 60 codes in my Aegis, how would it look if I had just a quarter of those in apps instead?

But the main issue I have with passkeys is the simple issue of backups. I can backup my Aegis keys, I can't backup an app, or a hw passkey. I have to get a second one, and keep signing for it or something, not sure of the details, I just know it would be a major hassle. And there is no way I'm trusting a little usb device to not break.

Right now I see no compelling reason to switch from regular OTP codes, change my mind.

▲

Gander5739 2 hours ago | parent [-]

> Right now I see no compelling reason to switch from regular OTP codes. Change my mind.

The phishing potential?

▲

INTPenis 2 hours ago | parent [-]

I completely misunderstood passkeys.

Just came back from doing a bit of research and apparently I can use Bitwarden to generate and store passkeys.

I have been dismissing the entire concept because I assumed it had to do with hardware keys, which I would never trust. But if it's bitwarden, then I can easily do a backup, and that would be very reliable.

I think I'm going to start using passkeys... :D

	▲	hedora 2 hours ago \| parent [-]
		The standard allows sites to ban things like bitwarden over time.