2 ms·

So we should stick to game over passwords, that don't even require device access, just a clever phishing email or hacking a weak website that has a copy of your

by krupan 3y ago

So we should stick to game over passwords, that don't even require device access, just a clever phishing email or hacking a weak website that has a copy of your password that, oops, you reused on 10 other websites?

sillysaurusx 3y ago
Passwords aren’t game over though. Access from a different region usually triggers a verification email. I don’t think we should stick with them, but there’s a difference between sticking with something and forcing everyone to use something else. Is it true that you won’t be able to use passwords at all in the new scheme? If so, this seems… risky. Question. Suppose I have a passkey on my device. Obviously it gets synced to some sort of cloud, so that if I lose my device, I don’t lose my account. But does everyone who has access to any device get all my passkeys? I hope not, but part of the blog post was to raise awareness. This is a nice reminder it’s time to look into passkeys deeply.