News for hackers. Stuff that matters.
Re:Passkeys: They're not perfect but they're getting better by scratcheee on Tuesday October 28, 2025 @02:58PM (#45737273)
The article explains the weaknesses of the password-centric approach:

> whether by phishing or exploiting the fact the passwords are weak or have been reused

1. Phishing is harder when you only ever enter your password into 1 place, and that one place is designed to be secure and consistent.

2. Much easier to have exactly 1 strong password than unique strong passwords for every website.

Is it better than a vault full of random passwords? Probably not, beyond pressuring the user into using the more secure method

There are no comments on this comment yet.