News for hackers. Stuff that matters.
Re:Don't use passkeys for encrypting user data by pibaker on Saturday February 28, 2026 @04:04AM (#47192586)
The main benefit is you will never put your password on a phishing site. Password managers provide some protections against it because if they do not work automatically on a website you know something is fishy, but sadly many websites have botched their password input so even with a password manager you may still need to manually copy and paste (or even type, if pasting is disabled) the password even with a password manager.

The problem is whether or not the benefit outweighs the additional risks introduced — losing account access when you lose a device, furthering device lock down, difficulty transferring the passkey between devices, UX degradation due to bad implementation. In my opinion the answer is no and I am sticking with my passwords.

Re:Don't use passkeys for encrypting user data by TurboSkyline on Saturday February 28, 2026 @08:33AM (#47195177)
> sadly many websites have botched their password input so even with a password manager you may still need to manually copy and paste (or even type, if pasting is disabled) the password.

Unfortunately, it’s exactly those websites that I think would be unlikely to support passkeys at all.

Re:Don't use passkeys for encrypting user data by encrypted_bird on Friday March 06, 2026 @11:25PM (#47284482)
> but sadly many websites have botched their password input so even with a password manager you may still need to manually copy and paste

Exactly this. I use KeePassXC and the number of sites where auto-input doesn't work even if the URL is 100% correct in the entry properties is _frustratingly_ high.