3 ms·
This seems pretty worrisome if you have ANY non-Apple device. So if I create an account using PassKeys, but at some later date, I need to log in using a browser
by cromwellian 5y ago
This seems pretty worrisome if you have ANY non-Apple device. So if I create an account using PassKeys, but at some later date, I need to log in using a browser on a Windows or Linux box, what do I do? I don't have a password, since one was never created. And all my credentials are in iCloud.
- username190 5y agoThis is already an issue Apple has with their own Apple ID 2-factor authentication; in order to authenticate, you must either accept the prompt and receive the code on a current Apple device, or (secondarily) recieve a code via SMS. Frustratingly, there is no option to add a TOTP code (like most other services, including Google, offer) or to disable SMS 2FA as a backup (despite its known security issues). I say this mostly because I assume Apple would use your Apple ID credentials as a way to log in to these services on a Windows or Linux machine, as they do currently with the "Sign in with Apple" flow.
- dbbk 5y agoCurrently yes, they're obviously working on a solution to that (it's the only non-green part of the chart)