Re:The Cryptography Behind Passkeys
by EbNar on Thursday May 15, 2025 @07:46AM
(#43994002)
At the moment, I'm going to avoid them as long as I can. It's not that I don't like the concept, but I think that a strong password + 2FA is already "enough" and I don't need to add complexity to my setup. No, I don't really fear phishing.
[ Parent
| on HN ]
Passkeys reduce complexity, at least in my experience. A single click versus entering credentials then finding the 2FA pin on your phone or something.
By "complexity" I meant that they are "opaque" to me and somewhat not tied to and identity (be it email or username). Maybe it's me being inept, but I used them once or twice just for fun in Bitwarden and now I can't find them anywhere in my vault.
https://community.bitwarden.com/t/special-vault-search-keywo...
Maybe it's just a Bitwarden issue.
The 2FA issue isn't such for me. As I explained in a different comment, 2FA pins are copied automatically and are thus just a "ctrl+v" away.
Perhaps a Bitwarden issue. I had them in 1Password and used them without any problems, then moved them out and into my Apple Keychain to separate those concerns a bit better. Both solutions work pretty well.
Having to pull my phone out or go and find/fetch it to grab a pin is pretty annoying for me, since I also don't keep them in my password manager.
I did for a long time but figured that if my password manager was compromised I would be royally screwed since they'd have my 2FA there to, meaning the password manager is actually a weak point.