4 ms·
Passwords will never be supplanted unless the new challenger can satisfy all of the following: * Easy to understand. (A password is just a word/phrase/string o
by Dalewyn 4y ago
Passwords will never be supplanted unless the new challenger can satisfy all of the following:
* Easy to understand. (A password is just a word/phrase/string of characters only you know.)
* Easy to use. (Using a password only requires remembering and typing it in when prompted.)
* Convenient. (Only your ability to remember and type required. No other tools or gadgets required.)
* Simple. (All of the above.)
If something needs an essay to describe itself, it's not killing off passwords.
- shadowgovt 4y agoI'm actually going to set this up on my mother-in-law's machine next time I see her. She's forever losing her book of passwords, but always has her phone on her.
- brokenmachine 4y agoThat'll be fun when she drops her phone in the toilet.
- shadowgovt 4y agoThen she's back to where she is now.
- mrb 4y agoPasswords will never be supplanted? As always, it's a false dichotomy. Passwords will continue to be useful for some scenarios, but in others they will and are being replaced by other methods such as biometrics, U2F tokens, etc
- nine_k 4y agoBiometrics should never serve as a password. It may serve as a login. Passwords should be easy to retire and change if they are compromised. You can' easily change your fingerprint or iris circle on demand, if somebody makes a good enough copy.
- psychphysic 4y agoIt's also private. Do you really want your only means of logging into a service identify you because it's also the only way you log into your banking? And should you want to kill off an identity so you want to have to register everything?!
- augusto-moura 4y agoI'm not sure if it is passkeys or other mechanism, but I can easily open my bank account on my Android phone just by using biometrics. Instead of typing a pin or password I just do the biometrics and voilá, it opens like magic. That really made me appreciate passwordless apps. On the other hand, I don't really know how would that work on desktops, should chrome use a Windows service for that? Would it use its own servers? Apple would probably do it themselves. And how about Linux? Would a cross platform option ever exist? Maybe 1password?
- prmoustache 4y agoI guess the idea is they will ask you to grab your smartphone the same way they do it for 2FA. For the end user it will be just like using the 2nd factor of authentication without the primary one (login + password).
- JohnFen 4y agoWhat do you do if you don't have a smartphone or are unwilling to use it for this?
- dahwolf 4y agoI would add portable (which passkeys are not) and recoverable (which passkeys are not, in the worst case).
- k2enemy 4y agoAnd easy to share.
- foobarmoo123 4y agoPasskeys do all of this * Easy to understand. Your device will just ask "sign in?" * Easy to use. Your device will just ask "sign in?" * Convenient. Nothing to remember, nothing to do * Simple (all of the above) Passkeys are/will-be way simpler than passwords for the majority of users