News for hackers. Stuff that matters.
Re:Passkeys: The Beginning of the End of the Password by Dalewyn on Wednesday May 03, 2023 @04:28PM (#35807354)
Passwords will never be supplanted unless the new challenger can satisfy all of the following:

* Easy to understand. (A password is just a word/phrase/string of characters only you know.)

* Easy to use. (Using a password only requires remembering and typing it in when prompted.)

* Convenient. (Only your ability to remember and type required. No other tools or gadgets required.)

* Simple. (All of the above.)

If something needs an essay to describe itself, it's not killing off passwords.

Re:Passkeys: The Beginning of the End of the Password by mrb on Wednesday May 03, 2023 @04:41PM (#35807492)
Passwords will never be supplanted? As always, it's a false dichotomy. Passwords will continue to be useful for some scenarios, but in others they will and are being replaced by other methods such as biometrics, U2F tokens, etc
Re:Passkeys: The Beginning of the End of the Password by nine_k on Thursday May 04, 2023 @01:52AM (#35811673)
Biometrics should never serve as a password. It may serve as a login.

Passwords should be easy to retire and change if they are compromised. You can' easily change your fingerprint or iris circle on demand, if somebody makes a good enough copy.

Re:Passkeys: The Beginning of the End of the Password by shadowgovt on Wednesday May 03, 2023 @04:46PM (#35807541)
I'm actually going to set this up on my mother-in-law's machine next time I see her. She's forever losing her book of passwords, but always has her phone on her.
Re:Passkeys: The Beginning of the End of the Password by brokenmachine on Wednesday May 03, 2023 @07:37PM (#35809317)
That'll be fun when she drops her phone in the toilet.
Re:Passkeys: The Beginning of the End of the Password by shadowgovt on Wednesday May 03, 2023 @08:15PM (#35809641)
Then she's back to where she is now.
Re:Passkeys: The Beginning of the End of the Password by psychphysic on Wednesday May 03, 2023 @04:59PM (#35807718)
It's also private.

Do you really want your only means of logging into a service identify you because it's also the only way you log into your banking?

And should you want to kill off an identity so you want to have to register everything?!

Re:Passkeys: The Beginning of the End of the Password by augusto-moura on Wednesday May 03, 2023 @05:36PM (#35808115)
I'm not sure if it is passkeys or other mechanism, but I can easily open my bank account on my Android phone just by using biometrics. Instead of typing a pin or password I just do the biometrics and voilá, it opens like magic. That really made me appreciate passwordless apps.

On the other hand, I don't really know how would that work on desktops, should chrome use a Windows service for that? Would it use its own servers? Apple would probably do it themselves. And how about Linux? Would a cross platform option ever exist? Maybe 1password?

Re:Passkeys: The Beginning of the End of the Password by prmoustache on Thursday May 04, 2023 @06:14AM (#35813289)
I guess the idea is they will ask you to grab your smartphone the same way they do it for 2FA. For the end user it will be just like using the 2nd factor of authentication without the primary one (login + password).
Re:Passkeys: The Beginning of the End of the Password by JohnFen on Thursday May 04, 2023 @12:10PM (#35817728)
What do you do if you don't have a smartphone or are unwilling to use it for this?
Re:Passkeys: The Beginning of the End of the Password by dahwolf on Wednesday May 03, 2023 @07:40PM (#35809349)
I would add portable (which passkeys are not) and recoverable (which passkeys are not, in the worst case).
Re:Passkeys: The Beginning of the End of the Password by k2enemy on Wednesday May 03, 2023 @08:38PM (#35809801)
And easy to share.
Re:Passkeys: The Beginning of the End of the Password by foobarmoo123 on Thursday May 04, 2023 @11:01PM (#35824754)
Passkeys do all of this

* Easy to understand. Your device will just ask "sign in?"

* Easy to use. Your device will just ask "sign in?"

* Convenient. Nothing to remember, nothing to do

* Simple (all of the above)

Passkeys are/will-be way simpler than passwords for the majority of users