News for hackers. Stuff that matters.
Re:The Cryptography Behind Passkeys by commandersaki on Wednesday May 14, 2025 @11:13PM (#43991464)
I hope 1Password release passkey unlock for vaults soon. Then I'll never have to enter the passphrase to unlock again, and my "passphrase" will be essentially the unlock code for my phone.
Re:The Cryptography Behind Passkeys by atonse on Thursday May 15, 2025 @10:26AM (#43995456)
You can already unlock 1Password using biometrics in your Apple devices. they do ask you for your password every 2 weeks though. But I think that's a great balance.

...Unless I misunderstood what you're talking about. When I put in a passkey, 1p just asks me to press a button, not re-unlock.

Re:The Cryptography Behind Passkeys by commandersaki on Thursday May 15, 2025 @12:44PM (#43996806)
With a passkey you would have one in keychain that unlocks 1p. So you will only be asked for your phone password/unlock code whenever iOS asks, but it will be used to unlock 1P. Never need to enter your 1P passphrase.
Re:The Cryptography Behind Passkeys by atonse on Thursday May 15, 2025 @03:33PM (#43998467)
I still don’t follow. So instead of 1 password that you remember, there would now be a passkey?

I feel that is too risky. Where would you store that passkey? And what if you lose it?

I suppose the 1p emergency kit could print out a QR code or something.

Re:The Cryptography Behind Passkeys by commandersaki on Thursday May 15, 2025 @03:41PM (#43998538)
The passkey is stored in the secure enclave which is protected by your unlock code & biometrics (for fast unlock), or whatever the equivalent is for Google. You're not replacing your secret key / passphrase, it's just a different way to authenticate and decrypt vaults.

It's really more a convenience on a handheld device where entering a passphrase (mine is 20 characters) is a pain in the arse. Though, if it were available for macOS, I would use it there too.