Re:Google is making their weak, flawed passkey system the de...
by blowski on Tuesday October 10, 2023 @01:56PM
(#37835265)
There is a counter-argument that passkeys are more complex for folks who are already pretty good with security, without really adding any value. It removes some control from people who know what they're doing. Google's track record on abandoning things doesn't help me feel more confident.
Re:Google is making their weak, flawed passkey system the de...
by izacus on Tuesday October 10, 2023 @02:37PM
(#37835753)
I don't understand that argument - passkeys behave exactly like password manager managed random passwords. Exactly the same - even same apps use them.
Surely that's the standard for security for "people who know what they're doing"?!
Re:Google is making their weak, flawed passkey system the de...
by silon42 on Wednesday October 11, 2023 @07:22AM
(#37843128)
I don't trust my phone with my passwords store, they are on a password manager (some in firefox, some in other sw) on a laptop (and backed up to another encrypted machine).
Re:Google is making their weak, flawed passkey system the de...
by croes on Wednesday October 11, 2023 @06:47PM
(#37851347)
Have you tried switching your password manager for passkeys?
Maybe because you had an iPhone and your new Phone is an Android, or you don't like the prices of 1password etc.
At the moment you are stuck.
I hate all the resistance to even small improvements over passwords (like passkeys). The only question we should be asking is, "does this improve on passwords?" In this case, yes it does. With passkeys, it's only the person who powns your phone that gets to log into all your accounts. With passwords, it's the person that powns your phone, or gets your password through phishing, or hacks one the the many websites that also has a copy of your password. This is an improvement! Let's do it!