4 ms·
On iPhones, aren’t the passkeys stored in iCloud Keychain and managed with the nifty passwords app (I’m happy to have a real interface finally). I assume simil
by nytesky 2y ago
On iPhones, aren’t the passkeys stored in iCloud Keychain and managed with the nifty passwords app (I’m happy to have a real interface finally). I assume similar cloud storage for android phones?
- al_borland 2y agoI’m thinking if someone decides to change browsers, or changes ecosystems. Say they have all their passkeys in Apple Passwords, then they move to Android. Or they have everything in Chrome, then move away from Android and don’t bother downloading chrome and logging into their existing account. If the user doesn’t understand what this stuff is, why would they think to account for it during a migration? I have a friend who just last year was talking about getting a new phone number with his new phone. My first thought was, “won’t that break all your 2FA and lock you out of your bank and a bunch of other stuff?” He had no idea and didn’t think he had any of it, but most of that was stuff I didn’t opt into, but simply exists now. I’m not sure how he couldn’t have any of it. He ended up not doing it, but I think someone could very easily screw themselves.
- acdha 2y agoMost services I’ve seen do not make passkeys an all or nothing proposition so they’d likely still be able to use a password reset + SMS challenge, but I think the concern is real about switching between platforms. They’ve promised portability but implementations are still AWOL.