Re:The Cryptography Behind Passkeys
by packtreefly on Thursday May 15, 2025 @02:09PM
(#43997675)
I put the passkeys in a password manager, then lock the password manager with multiple physical Yubikeys, keeping several in secure storage.
This same pattern works for Google/iCloud accounts.
On the flip-side, backup keys are not a solution for me in this instance. The model being proposed is one where we have hundreds of passkeys in our vaults, one for each service. I don't want to spend time setting up a backup key on every service; I want the ease of use of just hitting "use passkey" on a new site and having it all work. I just also want a 100% reliable backup option that has no dependency on any service, vendor-specific system or anything. Essentially, I want a backup that my grandmother could hand to a local kid with tech skills, and be able to get into my account(s) while sitting together at her computer.