4 ms·
Got it. I think import/export is a solved problem, assuming you're OK with (at least temporarily) having your secrets unencrypted. Password managers already do
by the_snooze 3y ago
Got it. I think import/export is a solved problem, assuming you're OK with (at least temporarily) having your secrets unencrypted. Password managers already do this.
It's not a technical issue that's preventing Apple or Google from making their passkeys importable/exportable.
- taeric 3y agoThis doesn't seem to address my question, though? That is, agreed it is not a technical issue, but it is a security one? As you stated, if you are ok with your secrets being unencrypted, then sharing is totally possible. But this seems to walk headlong into having to trust everyone that you share the unencrypted secret with?
- protonpass 3y agoHi there, it is up to individual websites whether they require passkeys or passkeys + 2FA etc.. It is also important to note that most attacks are phishing-based, and passkeys are phishing-resistant, and will only work on the originating website. Proton Sentinel also helps to protect account takeovers, even when an attacker has stolen your password.