Hate to say it, but I personally don't feel comfortable storing all of my logins on Apple or Google's servers. Sorry, not for me. If you have multiple Apple de

Hate to say it, but I personally don't feel comfortable storing all of my logins on Apple or Google's servers. Sorry, not for me. If you have multiple Apple devices, for example, you don't have to use iCloud Keychain for passkeys if you're that paranoid, regardless of how convenient it is. All I can say is Keychain is pretty badass; I have no qualms about using it [1]. If you're on a cruise and you accidentally drop your iPhone into the ocean, you could buy a new one at the next port—or when you get back home—and do Apple's restore process and you're back in business in 10 minutes. All of your logins, credentials, certificates, etc. are encrypted with a key Apple doesn't have, so they can't access or give it to anyone else even if they were presented with a search warrant by law enforcement [2]. And also what happens if the public private key pair is compromised? It's called a public key for a reason; it can't be compromised, right? The public key replaces your username when logging in; both are public information. The private key never leaves your device, so there's no opportunity for a sketchy website or fishing attack to get it. And it certainly can't be intercepted like SMS codes can be. You know how people get fooled into logging into a fake site who's domain is one character different than the authentic domain? A password manager doesn't help you with that but passkeys are cryptographically attached to a domain, so it can't be used on a site masquerading as your bank's website. They criticize 2FA as flawed in the article, but how common are the SMS vulnerabilities that they talk about? You're kidding, right? These are the first 3 hits on google: [3] [4] [5] [1]: https://support.apple.com/guide/security/keychain-data-protection-secb0694df1a/1/web/1 https://support.apple.com/guide/security/keychain-data-prote... [2]: https://support.apple.com/guide/security/secure-icloud-keychain-recovery-secdeb202947/1/web/1 https://support.apple.com/guide/security/secure-icloud-keych... [3]: "Why Using SMS Authentication for 2FA Is Not Secure"—https://securityboulevard.com/2021/12/why-using-sms-authentication-for-2fa-is-not-secure/ https://securityboulevard.com/2021/12/why-using-sms-authenti... [4]: "Why 2FA SMS is a Bad Idea"—https://blog.sucuri.net/2020/01/why-2fa-sms-is-a-bad-idea.html https://blog.sucuri.net/2020/01/why-2fa-sms-is-a-bad-idea.ht... [5]: "Can We Stop Pretending SMS Is Secure Now?"—https://krebsonsecurity.com/2021/03/can-we-stop-pretending-sms-is-secure-now/ https://krebsonsecurity.com/2021/03/can-we-stop-pretending-s...