Microsoft Confirms Password Deletion for 1B Users

Re:Microsoft Confirms Password Deletion for 1B Users by arcbyte on Tuesday December 17, 2024 @05:42PM (#42446238)

I helped a family member set up an account on a state website which involved also creating an account on id.me. The amount of text message codes and email codes and usernames and passwords was ridiculous and incredibly difficult for them to follow. Passkeys would make it impossible

[ Parent | on HN ]

Re:Microsoft Confirms Password Deletion for 1B Users by lxgr on Tuesday December 17, 2024 @07:52PM (#42447110)

Have you actually tried passkeys there? I find the implementation pretty straightforward to use: I enter a username, password (unfortunately no passwordless passkey support yet), and then click "ok" when prompted to use my passkey by my browser.

[ Parent | on HN ]

Re:Microsoft Confirms Password Deletion for 1B Users by jesseendahl on Thursday December 19, 2024 @03:54AM (#42459654)

>Passkeys would make it impossible

This is so incredibly wrong that it makes me think you've never actually experienced signing in with a passkey.

Passkeys would eliminate all the text message codes, email codes, and passwords. The flow is literally just: Face ID or Touch ID (or equivalent on Android/Windows), and you're done. It's both a faster/easier user experience than what you're describing and it's way more secure than any of the things you described, because the resulting credential is domain-bound and therefore can't be phished.

[ Parent | on HN ]