News for hackers. Stuff that matters.

A comment on Google announces passwordless by default: Make the switch to passkeys. Parent comment

Re:Google announces passwordless by default: Make the switch... by true_religion on Tuesday October 10, 2023 @05:49PM (#37838066)
Won’t most people be logged into their Google account anyways? So if you steal their phone, and guess their PIN then you can just use the already logged in account.

What does this change?

[ Parent | on HN ]
Re:Google announces passwordless by default: Make the switch... by j-bos on Tuesday October 10, 2023 @08:22PM (#37839506)
Certain account changing actions cannot be completed without the password. But if you have the phone (session, sms, passkey), you can reset the password and it's off to the races.
[ Parent | on HN ]
Re:Google announces passwordless by default: Make the switch... by illiac786 on Wednesday October 11, 2023 @09:34PM (#37852477)
If the person uses a password manager, same result. You have the phone unlocked, you have everything.
[ Parent | on HN ]