News for hackers. Stuff that matters.

A comment on We replaced passwords with something worse. Parent comment

Re:We replaced passwords with something worse by Wowfunhappy on Wednesday August 06, 2025 @11:44PM (#44820373)
But if you could back up a passkey, wouldn't the key just be a password?

(I do agree with you about backups being essential, but my conclusion was "the idea is fundamentally flawed," rather than "it's one tweak away from greatness.")

[ Parent | on HN ]
Re:We replaced passwords with something worse by burnt-resistor on Thursday August 07, 2025 @02:58AM (#44821412)
This is the irreducible problem. It's the Emperor's New Clothes™. So either the secrets get generated and stored in tamper-protected hardware, or they are stored somewhere else that can be made portable. For the latter, then they ought to be serializable into some standard form.
[ Parent | on HN ]
Re:We replaced passwords with something worse by harg on Thursday August 07, 2025 @05:16AM (#44822308)
No, because unlike a password you never provide the private key for a passkey to the site you’re logging into, which is how many password breaches occur.
[ Parent | on HN ]
Re:We replaced passwords with something worse by hooverd on Friday August 08, 2025 @10:23AM (#44837328)
Passkeys solve phishing by being domain bound and never exposing the private key. It's a huge improvement!
[ Parent | on HN ]