3 ms·
> For proficient users who use passwords securely, this is an acute drop in security (if forced to use). Why? Because the user can have their device stolen and
by grotorea 3y ago
> For proficient users who use passwords securely, this is an acute drop in security (if forced to use).
Why? Because the user can have their device stolen and the PIN guessed? Can't you use a long password instead of a PIN if you want to?
And this part I'm not sure of, please correct me if you know. If I understand it correctly there's one security advantage even assuming a sophisticated user who is immune to weak passwords, password reuse or phishing. If there's ever a leak of Google passkeys, the leak would only get public keys, which can't be used for login, making the leak mostly useless.
- raxxorraxor 3y agoI live in a country where my phone is forcibly tied to my identity. I will not use it to authenticate anywhere. For business purposes with my business phone perhaps, but certainly not for my private life. That would be a huge decrease in security.