3 ms·
I don’t think it’s a complete downgrade. You get phishing protections, single-site super-strong “passwords”, if the public key is leaked, it doesn’t impact you,
by noahtallen 3y ago
I don’t think it’s a complete downgrade. You get phishing protections, single-site super-strong “passwords”, if the public key is leaked, it doesn’t impact you, etc.
If the only attack vector is someone having to crack into your encrypted hard drive, and then decrypt whatever stores the passkeys… that’s still both pretty strong and also probably not the biggest security issue most people face.
The biggest issues most non-tech people face are 1. reusing simple passwords, and 2. getting phished through similar UIs/emails. It’d be much better for most people to use passkeys.