4 ms·
>> Passkeys are unique, so no more password stuffing attacks. > Just like passwords. What is the difference ? >> Passkeys can't be to short, in contrast to pa
by TheNewsIsHere 2y ago
>> Passkeys are unique, so no more password stuffing attacks.
> Just like passwords. What is the difference ?
>> Passkeys can't be to short, in contrast to passwords
> So a "long password" is a "passkey" ?
Of course not.
Passkeys are effectively just key pairs defined by a FIDO standard. It’s much more productive to think of passkeys as mutual certificate authentication designed for use by the masses.
If you’ve ever used a Yubikey for primary authentication, you’ve already used a passkey.
- skydhash 2y agoThe issue is tying it to a device that can be easily lost. Yubikeys can be easily hidden and are not thief magnets.
- TheNewsIsHere 2y agoYep, you ideally don’t have your only key/copy of the key on any one device. That’s why the mainstream implementations are synced. Or why you have an extra Yubikey.