| ▲ | MBCook an hour ago | |
As far as I know, it has never happened. I know there was a presentation or two on bugs in individual password managers. But that is not a flaw in passkeys. And there have been bugs in password managers that expose standard passwords as well. | ||
| ▲ | autoexec 6 minutes ago | parent [-] | |
> But that is not a flaw in passkeys. By that reasoning passwords are 100% secure too, it's the human's fault when they fall for phishing sites! Passkeys depend on humans, password managers, devices, certificate authorities, browsers, and operating systems. That's not even including the implementation itself (https://www.esentire.com/blog/securing-passkeys-thwarting-au...) All of this means that even when you're using a passkey an attacker could still break into your accounts. Passkeys can make it harder for them, but it can make it harder for you to get access to your accounts too. For me, I don't think the risk of phishing is worth the trouble passkeys would cause me. | ||