Google announces passwordless by default: Make the switch to passkeys

Re:Google announces passwordless by default: Make the switch... by joshspankit on Tuesday October 10, 2023 @06:01PM (#37838209)

Don’t try to argue that on-device biometrics are a foolproof solution to this. Even at it’s best you can unlock a device from a sleeping (or drunk or naive) user which just brings us back to the same issue: already being logged in to a passkey service.

[ Parent | on HN ]

Re:Google announces passwordless by default: Make the switch... by jackson1442 on Wednesday October 11, 2023 @12:27PM (#37846551)

From the parent I responded to, emphasis mine:

> The criticism is based on the idea that most non-techie folks are unlikely to use a strong PIN _and are unlikely to set up strong biometrics._

On-device biometrics are typically _also_ used to unlock the device password manager, so my other remarks still apply. I bet a sizeable portion of the HN crowd also uses biometrics to unlock their well-configured password managers on their phone.

At least, that's what I personally do. Entering my very strong vault password every [lock duration] on a touch keyboard is already irritating enough; I'd rather just look at my phone to unlock my passwords when I need to use autofill.

[ Parent | on HN ]