2 ms·
Am I the only person who hates passkeys? I got locked out of my gmail account because the browser couldn’t figure out whether i used icloud keychain or another
by SlightlyLeftPad 2y ago
Am I the only person who hates passkeys? I got locked out of my gmail account because the browser couldn’t figure out whether i used icloud keychain or another app and resulted in my actual passkey not being read as valid.
Some sites also remove the ability to enter a password and 2FA when you have a passkey configured. Your only option is to do an account recovery.
These same sites, try to get you to accidentally turn on passkeys at every turn. The user experience is almost always worse, particularly if you already use a password manager.
- out-of-ideas 2y agoi'll die happy using user+pass+totp if i can get away with it
- namaria 2y agoThe unspoken truth of 'cybersecurity' (even the name is part of this pattern) is that bolt on complexity will always reduce safety. Computer security is not that hard. What is hard is selling complexity as a vector for vendor lock in and then bolting on security on top of that. Every new feature, every new line of code will introduce potential vulnerabilities. Every extra bit of complexity will make the systems more vulnerable overall. And the pattern is also followed by the 'cybersecurity' providers. The more complex they make the song and dance, the more dependent their costumers become long term. Normal Accidents opened up my eyes to this grift. I highly recommend the book.