4 ms·
> 1. Passkeys are unique, so no more password stuffing attacks. Not really relevant for password manager users. > 2. Passkeys can't be to short, in contrast t
by keybored 2y ago
> 1. Passkeys are unique, so no more password stuffing attacks.
Not really relevant for password manager users.
> 2. Passkeys can't be to short, in contrast to passwords
Not really relevant for password manager users.
- Ajedi32 2y ago~90% of people who are presented with a password input field are not and never will be "password manager users". 100% of people presented with a passkey prompt are, because the very nature of passkeys is that they're stored in what is effectively a password manager.
- keybored 2y ago> > I don’t understand the benefit of using passkeys in a password manager. Echoed in his ears.
- Ajedi32 2y agoAh, I think I misunderstood that comment. From a global perspective "the benefit" compared to using passwords in a password manager is indeed exactly what I said, but I guess that user was asking more about the personal benefit on an individual level. From that perspective it just makes the UX slightly smoother and makes it impossible for the site to screw up and leak your plaintext creds. Other than that yeah there's not a big difference compared to using an autofilled, unique, randomly generated password. Which is good, because eventually sites are going to start phasing out that latter option for the exact reasons I outlined in my previous comment.
- growse 2y agoAh yes, the good old "only an issue for people who are holding it wrong" argument. The thing about good design is that it makes it impossible to "hold it wrong".