3 ms·
Passkeys don't send the hardware identifier or anything else to the service when you authenticate with them - all they see is a signature and a public key with
by judge2020 4y ago
Passkeys don't send the hardware identifier or anything else to the service when you authenticate with them - all they see is a signature and a public key with no authority/signing chain or anything. So you can very well create software passkey implementations and whatnot, or use something like a Yubikey for your passkey storage.
- account-5 4y agoMy personal preference is for it not to be tied to a device that can be lost, stolen, broken. That way I don't need multiple backup devices to login to one service. My password manager generates unique strong passwords, is offline and no big multinational advertising company controls it. The only thing I need to worry about is individual companies security practices. Passkeys offer me nothing of an improvement over this and only more obstacles and hoops to jump through. Until I can use passkeys like I can my password manager I'm not using them