3 ms·
Passkeys are improvements over passwords in that login/password tuple is replaced by a single string. Everything else, including hardware tokens, is marketing
by sam_lowry_ 1y ago
Passkeys are improvements over passwords in that login/password tuple is replaced by a single string.
Everything else, including hardware tokens, is marketing vendor lock-in.
- Shank 1y agoA passkey is not a single string? A passkey is a public private key pair where the private key is never sent to a server and signs things.
- frollogaston 1y agoYep. There is still a lock-in issue though, cause passkeys as implemented are hard to transfer across walled gardens. But at least it's not like early TOTP impls which often had no playbook for when you get a new phone even in the same ecosystem.