News for hackers. Stuff that matters.
Re:The Cryptography Behind Passkeys by johnmaguire on Wednesday May 14, 2025 @05:11PM (#43989269)
Passkeys are highly phishing resistant in a way that passwords are not and are not subject to credential reuse (though password managers somewhat solve the first problem and almost entirely solve the latter problem.)

In effect, though, 1Password is both something you have (the device with 1P logged in, login requires a Security Key that you don't memorize) and something you know (the master password) or are (typically biometrics can be used to unlock for a period after entering the master password.)

Re:The Cryptography Behind Passkeys by jcattle on Thursday May 15, 2025 @02:47AM (#43992469)
How do Password managers solve phishing issues? Even just somewhat?
Re:The Cryptography Behind Passkeys by josephcsible on Thursday May 15, 2025 @02:52AM (#43992492)
Your password manager will autofill your credentials on the real site but not on a phishing site.
Re:The Cryptography Behind Passkeys by jcattle on Thursday May 15, 2025 @05:02AM (#43993143)
Ah true. Didn't think of that. Good point