> Passkeys are trying to solve the phishing problem. They won't. AIUI, their solution for this was to refuse to export the key material from its container. No

> Passkeys are trying to solve the phishing problem. They won't. AIUI, their solution for this was to refuse to export the key material from its container. Now, they're allowing (or maybe "allowing") trusted third parties to copy that key material to back it up. I predict that within another couple of years, there will be a standard way for anyone to get that key material, which (from what I gather) makes their phishing-protection scheme no better than what password managers have been offering for a long time now. EDIT: It looks like at least one major password manager will just export your passkey private keys wholesale. I guess this exciting future is here now. Details here: <https://news.ycombinator.com/item?id=42555371 https://news.ycombinator.com/item?id=42555371>