4 ms·
> Passkeys are unique, so no more password stuffing attacks. Just like passwords. What is the difference ? > Passkeys can't be to short, in contrast to passwo
by hulitu 2y ago
> Passkeys are unique, so no more password stuffing attacks.
Just like passwords. What is the difference ?
> Passkeys can't be to short, in contrast to passwords
So a "long password" is a "passkey" ?
- TheNewsIsHere 2y ago>> Passkeys are unique, so no more password stuffing attacks. > Just like passwords. What is the difference ? >> Passkeys can't be to short, in contrast to passwords > So a "long password" is a "passkey" ? Of course not. Passkeys are effectively just key pairs defined by a FIDO standard. It’s much more productive to think of passkeys as mutual certificate authentication designed for use by the masses. If you’ve ever used a Yubikey for primary authentication, you’ve already used a passkey.
- skydhash 2y agoThe issue is tying it to a device that can be easily lost. Yubikeys can be easily hidden and are not thief magnets.
- TheNewsIsHere 2y agoYep, you ideally don’t have your only key/copy of the key on any one device. That’s why the mainstream implementations are synced. Or why you have an extra Yubikey.
- ahofmann 2y agoI really don't know how you're able to come up with the idea, that passwords are unique. They are in no aspect whatsoever unique. You as a user can try to use passwords, that are unique to you. That doesn't (can't and shouldn't) mean, that those passwords are unique against the database of a website, or other services.