News for hackers. Stuff that matters.

A comment on Google announces passwordless by default: Make the switch to passkeys. Parent comment

Re:Google announces passwordless by default: Make the switch... by kahnclusions on Tuesday October 10, 2023 @07:41PM (#37839194)
Most people have _extremely_ weak device security. 0000, 1234, DDMM of their birthdate, etc, you probably cover the majority of people.

And none of that helps you when someone robs you of your phone and says tell them your unlock code or they’ll stab you. Now they’ve got all your passkeys too.

[ Parent | on HN ]
Re:Google announces passwordless by default: Make the switch... by Dlanv on Tuesday October 10, 2023 @07:47PM (#37839233)
They also have your phone so they have text messages, email access, Google auth access, etc.

So yes it is true that your phone and it's pin/biometrics are ultimately the most important thing for security. But passkey on your phone is no worse than the previous state.

[ Parent | on HN ]