3 ms·
> But I would dread having to try and recover a Passkey with Google, who would I even talk to same as trying to recover a password: You go through the account
by pilif 2y ago
> But I would dread having to try and recover a Passkey with Google, who would I even talk to
same as trying to recover a password: You go through the account recovery workflow.
My opinion on passkey is that they are a wonderful tool to speed up the authentication process with sites in some cases (which turns out to be most cases). Rather than typing your password (hopefully on the correct site...) and then sometimes confirming with a magic link or a 2FA code, all you do is use your platform native's authentication conformation method (face recognition, fingerprint, PIN code, whatever) and you're done. This works independently of which site you're on.
Just as with password managers: If you use the OS built-in solution, you're locked into a specific platform (though I admit that with passwords it's at least possible to move them manually, albeit super painful if the passwords are secure), so if you're using multiple platforms concurrently use a password manager that supports all your platforms - most if not all password managers these days support passkeys.
For all breakages related to passkeys, the same applies as with passwords: You use the account recovery flow (which often is the weakest link on any site).
As such, passkeys feel like a wonderful shortcut with even slightly improved security (you can't present a passkey to the wrong site) in the default case.
- alisonatwork 2y agoExcept you don't just have the vendor lock-in of your password manager, you also have the vendor lock-in of a web browser too. Or you are forced to use a password manager that works as a web browser extension instead of a standalone application. This is so much worse than OTP, which already was incredibly user unfriendly, because at least with OTP you still had the freedom to type or paste the secret from wherever you wanted to get it generated.
- pilif 2y ago> you also have the vendor lock-in of a web browser too 1Password allows me to authenticate with my passkey in Safari (my default browser), Chrome and Firefox on macOS and Windows.
- 1oooqooq 2y agoyou know this is temporary, right? the site knows the key provider, and it's a matter of time the only accept the three big ones "for security".