Passkeys are a trap. Do not use them

Re:Passkeys are a trap. Do not use them by ketzu on Monday October 12, 2026 @03:50AM (#50052848)

> 2. You can't sign up for accounts with an e-mail from a "custom domain"

I remember debugging apple account creation because of that for a few hours. It wouldn't even tell me that my email domain/host was the issue, simply fail at the last step.

[ Parent | on HN ]

Re:Passkeys are a trap. Do not use them by lxgr on Monday October 12, 2026 @04:21AM (#50053124)

The same thing exists for phone numbers. About 90% of my calls with US banks go like this:

"Ok, first, to verify you, what's your phone number?" (oh no, it's one of those, because why do they need to ask...) "<my phone number>" "Ok, you'll receive a te— oh. Oh no. This is not a real phone number. What's your REAL phone number?"

[ Parent | on HN ]

Re:Passkeys are a trap. Do not use them by aidenn0 on Monday October 12, 2026 @03:16PM (#50061438)

Is that because it's VOIP or a landline?

[ Parent | on HN ]

Re:Passkeys are a trap. Do not use them by lxgr on Monday October 12, 2026 @06:49PM (#50064156)

VoIP, in my case. Probably much more secure than the average big three carrier plan from a SIM swapping perspective, but try convincing banks or their “security” service providers.

[ Parent | on HN ]