News for hackers. Stuff that matters.

A comment on Don't use passkeys for encrypting user data. Parent comment

Re:Don't use passkeys for encrypting user data by PunchyHamster on Saturday February 28, 2026 @05:31AM (#47193381)
if 2fa is "use the second factor that's on same device as first factor" (like when using phone apps in many cases, password + 2fa from email/sms/authenticator app on same device), I disagree.
[ Parent | on HN ]
Re:Don't use passkeys for encrypting user data by dwedge on Saturday February 28, 2026 @08:12AM (#47194937)
If I get your password, and you use 2fa that's stored on your phone, does that improve your security position or not
[ Parent | on HN ]