11 ms·
> Other than passkeys being randomly generated for each site (and linked to it) and tied to some kind of biometric authentication, it looks like passwords and p
by anon7000 1y ago
> Other than passkeys being randomly generated for each site (and linked to it) and tied to some kind of biometric authentication, it looks like passwords and passkeys are converging (except for some implementation details).
The fact that a passkey can only be used with the ONE site it was generated at, that it can encode the identity of the user as well as the password, and that there is a standardized, programmatic way to submit/retrieve a passkey to a website are all huge security upgrades over passwords. So no, they aren’t really converging in the ways that matter.
Syncing, export, whatever, are just implementation details of the platform and aren’t really related to the passkey standards.
Someone could create an iOS password manager for passkeys that stores the private keys in plain text for you to view and write down on paper. Of course, the major apps & platforms don’t do that because it’s not a popular feature (or secure), but anyone can write a password app for iOS
- krackers 1y agoI don't get those benefits: randomly generated password is by definition only going to be usable at the site it was generated for. I'm not sure what it means for a password to "encode my identity", but if it includes device-specific bits then that seems like an anti-feature. And autofill for passwords is mostly good enough as a standardized way to input passwords saved in a password manager.