5 ms·

> "Passkeys aim to solve the problems with passwords" So are you locked in with Apple if you use this, or can you switch all your existing passwords to another

> "Passkeys aim to solve the problems with passwords" So are you locked in with Apple if you use this, or can you switch all your existing passwords to another "passkey provider/service" ? > "Wave Goodbye to CAPTCHAS" I assume that's Safari only... so this is bad news for Firefox?

anaisbetts 4y ago
Assumedly any service that implements this will let you reset your password away from Passkeys, but it's still the soft lockin of "Ughhhh I don't want to reset everything". Sites will never go full Passkeys because that obviously falls over if you want to access it from any other device or computer, support request costs would go through the ceiling
- philistine 4y ago
  I wouldn’t be surprised if banks go passkeys only.
  - skoskie 4y ago
    By 2040.
gernb 4y ago
curious too as someone that uses 7 computers running 3 OSes, are my passkeys accessable, syncable, across OSes?
- alwillis 4y ago
  One obvious solution is to use a cross-platform password manager that supports Passkeys [1]. [1]: https://blog.1password.com/1password-is-joining-the-fido-alliance/ https://blog.1password.com/1password-is-joining-the-fido-all...
PartiallyTyped 4y ago
> In collaboration with Google, Microsoft and other industry players, Apple has been working on a new logon technology for web and other remote services called ‘passkeys’. I don't think it will be Apple only. However, I am wondering what will happen to services like bitwarden [1] if it is available on other OSes as well. [1] https://bitwarden.com/ https://bitwarden.com/
- solarkraft 4y ago
  What's your concern regarding Bitwarden?
  - zenlf 4y ago
    Not the original poster, but I think the worry is that how can a password manager survive in a passwordless future. Will major players be too powerful that no competing solutions will realistically exist.
    - PartiallyTyped 4y ago
      That's exactly my concern. I am the OP you refer to. BitWarden is a great product and an open source one at that. I suppose that passwords will always be a thing for the paranoids amongst us. But i don't know whether that is enough to sustain the product.
    - randyrand 4y ago
      You still need to have a wallet to store all your passkeys. I’d rather use bitwarden than Apples wallet.
nojito 4y ago
Passkeys are an Open Standard. https://fidoalliance.org/apple-google-and-microsoft-commit-to-expanded-support-for-fido-standard-to-accelerate-availability-of-passwordless-sign-ins/ https://fidoalliance.org/apple-google-and-microsoft-commit-t...
Shank 4y ago
> So are you locked in with Apple if you use this, or can you switch all your existing passwords to another "passkey provider/service" ? Eventually, yes. Not now, but the goal is eventually, yes. It requires support to come to Android and at that point, they'll build the bridge to bring them together. I don't think the system currently exists for this, but they've said Passkeys will be a "multi-year industry-wide transition" so I'm inclined to believe it'll ship in the coming years. When you sign in with a passkey, you have the option of scanning a QR code from a locally present device running any software that can speak the standard (e.g., Android). This means that you can login using any software that supports Passkeys using any devices that support Passkeys. For example, Chrome on Windows (chrome://flags, turn on passkey support) with an iPhone is a valid pair.
scarface74 4y ago
This is based on a standard that Apple, Google and Microsoft have all agree to and have agreed to a method to transfer keys between devices.
- mistrial9 4y ago
  three US Corporations will be in charge of the implementation of this newly required security ?
  - scarface74 4y ago
    Considering that the three control all of the popular operating systems for computers and devices, and most popular browsers who else would it be? It’s an open standards.
r00fus 4y ago
Passkey's (and webauth2's) major value proposition for software/service providers is for people to stop sharing accounts. This will result in more sales/subscriptions, and better tracking of preferences/activity. That it also happens to provide better security is just more cheese on the trap.
- randyrand 4y ago
  If they don’t allow a way to extract the private key from the wallet, do you really own that account? I wouldn’t touch it with a 10 yard stick unless I have full control of the private key.

anaisbetts 4y ago

Assumedly any service that implements this will let you reset your password away from Passkeys, but it's still the soft lockin of "Ughhhh I don't want to reset everything". Sites will never go full Passkeys because that obviously falls over if you want to access it from any other device or computer, support request costs would go through the ceiling

philistine 4y ago
I wouldn’t be surprised if banks go passkeys only.
- skoskie 4y ago
  By 2040.

gernb 4y ago

curious too as someone that uses 7 computers running 3 OSes, are my passkeys accessable, syncable, across OSes?

alwillis 4y ago
One obvious solution is to use a cross-platform password manager that supports Passkeys [1]. [1]: https://blog.1password.com/1password-is-joining-the-fido-alliance/ https://blog.1password.com/1password-is-joining-the-fido-all...

PartiallyTyped 4y ago

> In collaboration with Google, Microsoft and other industry players, Apple has been working on a new logon technology for web and other remote services called ‘passkeys’. I don't think it will be Apple only. However, I am wondering what will happen to services like bitwarden [1] if it is available on other OSes as well. [1] https://bitwarden.com/ https://bitwarden.com/

solarkraft 4y ago
What's your concern regarding Bitwarden?
- zenlf 4y ago
  Not the original poster, but I think the worry is that how can a password manager survive in a passwordless future. Will major players be too powerful that no competing solutions will realistically exist.
  - PartiallyTyped 4y ago
    That's exactly my concern. I am the OP you refer to. BitWarden is a great product and an open source one at that. I suppose that passwords will always be a thing for the paranoids amongst us. But i don't know whether that is enough to sustain the product.
  - randyrand 4y ago
    You still need to have a wallet to store all your passkeys. I’d rather use bitwarden than Apples wallet.

nojito 4y ago

Passkeys are an Open Standard. https://fidoalliance.org/apple-google-and-microsoft-commit-to-expanded-support-for-fido-standard-to-accelerate-availability-of-passwordless-sign-ins/ https://fidoalliance.org/apple-google-and-microsoft-commit-t...

Shank 4y ago

> So are you locked in with Apple if you use this, or can you switch all your existing passwords to another "passkey provider/service" ? Eventually, yes. Not now, but the goal is eventually, yes. It requires support to come to Android and at that point, they'll build the bridge to bring them together. I don't think the system currently exists for this, but they've said Passkeys will be a "multi-year industry-wide transition" so I'm inclined to believe it'll ship in the coming years. When you sign in with a passkey, you have the option of scanning a QR code from a locally present device running any software that can speak the standard (e.g., Android). This means that you can login using any software that supports Passkeys using any devices that support Passkeys. For example, Chrome on Windows (chrome://flags, turn on passkey support) with an iPhone is a valid pair.

scarface74 4y ago

This is based on a standard that Apple, Google and Microsoft have all agree to and have agreed to a method to transfer keys between devices.

mistrial9 4y ago
three US Corporations will be in charge of the implementation of this newly required security ?
- scarface74 4y ago
  Considering that the three control all of the popular operating systems for computers and devices, and most popular browsers who else would it be? It’s an open standards.

r00fus 4y ago

Passkey's (and webauth2's) major value proposition for software/service providers is for people to stop sharing accounts. This will result in more sales/subscriptions, and better tracking of preferences/activity. That it also happens to provide better security is just more cheese on the trap.

randyrand 4y ago
If they don’t allow a way to extract the private key from the wallet, do you really own that account? I wouldn’t touch it with a 10 yard stick unless I have full control of the private key.