3 ms·
> Passkeys are synchronized to your device ecosystem ... and soon also third-party password maangers on Android And at that point they make a full circle becom
by garganzol 3y ago
> Passkeys are synchronized to your device ecosystem ... and soon also third-party password maangers on Android
And at that point they make a full circle becoming just passwords with a master password. Essentially what password managers already do. You already can tie a master password to a biometric or another factor.
- lxgr 3y agoNot quite: Passwords are long-lived bearer tokens, which can be phished/MITMed (exclusively using auto-fill helps, but non-technical users are still prone to be phished) and are administratively harder to securely manage on the backend of the relying party.