2 ms·

Really looking forward to playing around with this passkeys thing. If I understand it correctly, I can't implement it as the only authentication method for my w

Really looking forward to playing around with this passkeys thing. If I understand it correctly, I can't implement it as the only authentication method for my website unless I'm okay with locking my users down to one single device? Edit: to clarify, if my user set up passkey on their iPhone and that's the only method of authentication for my website, they just wouldn't be able to sign in if they lost that iPhone? The key can't be recovered, transferred or backed up? I'm okay with that (I own several yubikeys myself), just want to make sure I understand it correctly.

alwillis 4y ago
It’s going to take a while before there’s a critical mass of passkey users to make this viable. Because it’s based on Webauthn, I believe a website can fall back to using a compatible security key (like a YubiKey) as authentication.
deleted 4y ago
[deleted]
ylk 4y ago
> to clarify, if my user set up passkey on their iPhone and that's the only method of authentication for my website, they just wouldn't be able to sign in if they lost that iPhone? That used to be the case. Since iOS 16 they are also synced via the iCloud Keychain: "Passkeys on iPhone require that you use iCloud Keychain. If you don’t have iCloud Keychain turned on when you try to save a passkey, you’ll be asked to turn it on. Passkeys also require that two-factor authentication is enabled for your Apple ID." https://support.apple.com/guide/iphone/sign-in-with-passkeys-iphf538ea8d0/ios https://support.apple.com/guide/iphone/sign-in-with-passkeys...
- nozzlegear 4y ago
  Perfect, thanks!