News for hackers. Stuff that matters.

A comment on Google announces passwordless by default: Make the switch to passkeys. Parent comment

Re:Google announces passwordless by default: Make the switch... by jesseendahl on Tuesday October 10, 2023 @06:56PM (#37838837)
You can recover access to your iCloud Keychain even if you've lost 100% of your devices.

See the section titled "Recovery security" in this article:

https://support.apple.com/en-us/102195

Relevant excerpt for those too lazy to click through:

"However, it's also important that passkeys be recoverable even in the event that all associated devices are lost. Passkeys can be recovered through iCloud keychain escrow, which is also protected against brute-force attacks, even by Apple."

[ Parent | on HN ]
Re:Google announces passwordless by default: Make the switch... by drdaeman on Tuesday October 10, 2023 @07:17PM (#37839009)
If I understand it correctly, this only works on another Apple device, though. So you'll need a spare iPhone or something.

Also, I'm pretty sure if Apple decides to block your iCloud account, you're most likely SOL.

[ Parent | on HN ]
Re:Google announces passwordless by default: Make the switch... by vorpalhex on Tuesday October 10, 2023 @11:08PM (#37840447)
> To recover a keychain, a user must authenticate with their iCloud account and password and respond to an SMS sent to their registered phone number.
[ Parent | on HN ]