4 ms·

Apple is working on this using WebAuthn, they call it Passkeys: https://sixcolors.com/post/2021/06/wwdc-2021-apple-takes-the-first-steps-to-a-password-less-fut

• cromwellian 5y ago
  This seems pretty worrisome if you have ANY non-Apple device. So if I create an account using PassKeys, but at some later date, I need to log in using a browser on a Windows or Linux box, what do I do? I don't have a password, since one was never created. And all my credentials are in iCloud.
  • username190 5y ago
    This is already an issue Apple has with their own Apple ID 2-factor authentication; in order to authenticate, you must either accept the prompt and receive the code on a current Apple device, or (secondarily) recieve a code via SMS. Frustratingly, there is no option to add a TOTP code (like most other services, including Google, offer) or to disable SMS 2FA as a backup (despite its known security issues). I say this mostly because I assume Apple would use your Apple ID credentials as a way to log in to these services on a Windows or Linux machine, as they do currently with the "Sign in with Apple" flow.
  • dbbk 5y ago
    Currently yes, they're obviously working on a solution to that (it's the only non-green part of the chart)