Re:Passkeys: They're not perfect but they're getting better
by velcrovan on Tuesday October 28, 2025 @02:56PM
(#45737235)
So your real issue here is with credential managers, but I'll bite. In most cases the vault is not protected only with your master password, but with other cryptographic info that prevents the vault from being opened on untrusted devices. If one of your trusted devices is compromised, I guess you have other issues.
[ Parent
| on HN ]
Re:Passkeys: They're not perfect but they're getting better
by AlexandrB on Tuesday October 28, 2025 @03:02PM
(#45737334)
Uhhh, how does that interact with:
> Users are largely unsure about the implications for their passkeys if they lose or break their device, as it seems their device holds the entire capability to authenticate. To trust passkeys as a replacement for the password, users need to be prepared and know what to do in the event of losing one – or all – of their devices.