2 ms·
I’m thinking if someone decides to change browsers, or changes ecosystems. Say they have all their passkeys in Apple Passwords, then they move to Android. Or th
by al_borland 2y ago
I’m thinking if someone decides to change browsers, or changes ecosystems. Say they have all their passkeys in Apple Passwords, then they move to Android. Or they have everything in Chrome, then move away from Android and don’t bother downloading chrome and logging into their existing account. If the user doesn’t understand what this stuff is, why would they think to account for it during a migration?
I have a friend who just last year was talking about getting a new phone number with his new phone. My first thought was, “won’t that break all your 2FA and lock you out of your bank and a bunch of other stuff?” He had no idea and didn’t think he had any of it, but most of that was stuff I didn’t opt into, but simply exists now. I’m not sure how he couldn’t have any of it. He ended up not doing it, but I think someone could very easily screw themselves.
- acdha 2y agoMost services I’ve seen do not make passkeys an all or nothing proposition so they’d likely still be able to use a password reset + SMS challenge, but I think the concern is real about switching between platforms. They’ve promised portability but implementations are still AWOL.