Re:What auth do you use? Why?
by CGamble26 on Thursday May 11, 2023 @09:52PM
(#35910914)
This may be a dumb question but, why couldn’t applications just use Webauthn? Why add passwords?
[ Parent
| on HN ]
The only reason probably if some accounts already have a password and you want to support it. If you're building a new app, I'd also go for WebAuthn / passkeys-only and use some other passwordless method (e.g. social login/OIDC or email magic links as fallbacks)