News for hackers. Stuff that matters.
Re:Passkeys: A Shattered Dream by abadpoli on Friday April 26, 2024 @10:21AM (#40169808)
Great in theory, but in practice there are still a frustrating amount of websites and services that put a low upper limit (usually just one or two) of the number of keys you can enroll.

This effectively makes it impossible to do what you’re saying for these websites. And it’s sort of an all-or-nothing thing: even if just one service is like this, then I either can’t use passkeys for it, or I have to find a way to sync across device. It sucks.

Re:Passkeys: A Shattered Dream by vel0city on Friday April 26, 2024 @10:28AM (#40169846)
I hear this a lot but it hasn't generally been my experience. The only site I've personally come across that supports webauthn/passkeys but doesn't support multiple is the AWS management page. Which I essentially bypass by just configuring SSO and using an IdP which does support it.

Every other site I've come across that supports these things supports multiple. What common sites support only one or two?

Re:Passkeys: A Shattered Dream by cuu508 on Friday April 26, 2024 @12:07PM (#40171036)
AWS now supports multiple MFA devices per account.
Re:Passkeys: A Shattered Dream by vel0city on Friday April 26, 2024 @12:09PM (#40171057)
That's awesome to hear, thanks for sharing!
Re:Passkeys: A Shattered Dream by int_19h on Friday April 26, 2024 @11:58PM (#40177088)
PayPal is a big one. It allows you to have exactly one passkey.