News for hackers. Stuff that matters.

A comment on The Cryptography Behind Passkeys. Parent comment

Re:The Cryptography Behind Passkeys by recursive on Wednesday May 14, 2025 @07:51PM (#43990402)
If I lose access to my password manager, I'd be substantially boned. But I'm less worried about that. It would require me to forget my password, or 1password to get pwned, go bad, or lose data.

The way I assess risk, that's less likely to happen than I am to lose my passkeys.

If I'm using passkeys but can recover my account with SMS, then why am I using passkeys? That sounds like the weak link of security. I'd rather use passwords, where I can understand what the password consists of rather than passkeys if I'm not getting an increase in security.

[ Parent | on HN ]
Re:The Cryptography Behind Passkeys by AnotherGoodName on Wednesday May 14, 2025 @09:19PM (#43990886)
Account recovery with the big providers that support passkeys is two factor from what i've experienced, eg. sms+email, email+old password or sms+recovery code etc. so definitely a step up from password login.
[ Parent | on HN ]