Re:Don't use passkeys for encrypting user data
by reddalo on Saturday February 28, 2026 @11:37AM
(#47197335)
No it's not a mistake. But say you lose the Yubikey, or you're away from home. How do you deal with that? You still need a password somehow.
Re:Don't use passkeys for encrypting user data
by tuwtuwtuwtuw on Saturday February 28, 2026 @11:43AM
(#47197410)
Sure. But I think that is same scenario as me loosing my phone today, since I use that for two factor auth.
My plan was to continue using bitwarden for passwords as well, but more as a break-glass mechanism that I really use. I want to use passkeys mostly for convinience.
Re:Don't use passkeys for encrypting user data
by pamcake on Sunday March 01, 2026 @02:26AM
(#47204514)
You're good. The relevant advice in article is to not reuse keys for encryption and auth.
Encrypting password manager database with a passkey or other authentication key on one of those yubikeys would be the mistake. Encrypting it with a separate dedicated key (or passphrase) on the same yubikey in parallel to its passkeys is fine.
Is this a mistake? I am already using password manager and totp for my accounts, but I am tired of dealing with passwords.
Even when using a password manager (bitwarden in my case), it just get tedious bringing out my phone, starting auth app, locating the correct account, reading 6 digit token and logging on.