Don't use passkeys for encrypting user data

Re:Don't use passkeys for encrypting user data by weird-eye-issue on Friday February 27, 2026 @11:42PM (#47190523)

Embedded webviews are the stupidest thing ever. Yesterday I got halfway through a checkout process, had to go back to another app to check something, and then the webview simply disappeared so I didn't bother finishing the checkout. This was on Android

Usually I open it in Chrome but for some reason I didn't realize it was a webview this time

[ Parent | on HN ]

Re:Don't use passkeys for encrypting user data by OptionOfT on Saturday February 28, 2026 @12:04AM (#47190690)

Embedded WebViews are a way to track you:

https://news.ycombinator.com/item?id=32514793

[ Parent | on HN ]

Re:Don't use passkeys for encrypting user data by mgrandl on Saturday February 28, 2026 @01:19AM (#47191152)

I disable them on every app that lets me. It is in every way worse UX than simply opening the browser.

[ Parent | on HN ]

Re:Don't use passkeys for encrypting user data by dgxyz on Saturday February 28, 2026 @03:58AM (#47192527)

God yes that. Our VPN client fell over the other day because the auth popup opens an embedded web browser which throws a javascript error as it's bouncing through our ID provider pages. How the fuck we got there I don't know. Everything is a gigantic Heath Robinson contraption.

[ Parent | on HN ]