3 ms·
With a password manager storing unique passwords, your password is still being sent over the network to that website each time you log in. With a password mana
by stetrain 2y ago
With a password manager storing unique passwords, your password is still being sent over the network to that website each time you log in.
With a password manager storing passkeys, your private passkey is not transmitted as part of the website request. It can't be intercepted or accidentally/negligently stored in plaintext in a database or server logs.
You still have to trust the secure syncing of your passkeys, just like you do with passwords, but there are still fewer threat vectors than with passwords.
- maeil 2y agoThis covers a negligible percentage of all hacked accounts and is at best a tiny part of what passkeys are supposed to solve.
- w0m 2y agosame argument/logic works to justify not wearing seat belts or hell, not outlawing murder. "Won't stop/save everyone so not worth doing".
- acdha 2y agoIt’s more than you think: if I can convince you to type in your Google password at g00gl3.com I can turn around and use that password for the real server. Passkeys block that attack.
- happymellon 2y agoSo they couldn't convince everyone to give up their privacy and use Facebook or Google to track our logins to other websites via "Login With", and this is a new way?
- acdha 2y agoIf by new you mean a completely different mechanism which does not share the privacy considerations of a single sign on service, yes. If you care about privacy, passkeys are a much better option.
- stetrain 2y agoWhat's the privacy issue if I use a third-party passkey manager like Bitwarden or 1Password and the passkeys are unique for each website?
- TheSpiceIsLife 2y agoMakes sense now. I shoulda read the document, but conversation is funner.