I am skeptical of passkeys. Not of the technology itself exactly, but people’s implementation of it. Username/password is much easier to grok (for developers a

I am skeptical of passkeys. Not of the technology itself exactly, but people’s implementation of it. Username/password is much easier to grok (for developers and users) and while it absolutely has downsides, as a user, I can fully protect myself with username/password (unique password per site). Passkeys might allow for fewer _user_ footguns but I worry there more _developer_ footguns. Also as a “power user”, I don’t want to deal with passkeys when I’m trying to automate something or scape my own data out of a website. It’s just another complication and I worry that anything edge-case-y (even approved methods) will break or have complications if you use passkeys (think app-specific-passwords when 2FA rolled out for gmail access). Because of this I consistently decline passkey usage until such a time that I feel it’s better understood by the people implementing it.