3 ms·
Are you not already using password manager for all of your passwords? It took forever to make any movement towards getting people to stop using the same passwo
by dylan604 1y ago
Are you not already using password manager for all of your passwords?
It took forever to make any movement towards getting people to stop using the same password every where. Now we're telling people passwords aren't secure even with using a password manager and they should use passkeys. So now we're saying that using the same software that we spent so much time suggesting to use is not good enough. Instead, now you want them to use a dedicated piece of hardware that needs to never be lost, but people lose their phones frequently.
It's amazing to me how the majority of readers here absolutely cannot put themself in the place of non-computer nerds that spend 0% of their day thinking about code/security or anything other than what the Kardashiens are doing or their favorite influencer or whatever other nonsense that is everything and not nonsense to them. It's this kind of thinking that put us in this position that the people building the thing can't think about how the users will actually use it
- XorNot 1y agoThat's not the problem: the problem is if I change password managers, or move software or any of many other possible things, whereas with password I can just type them into the new thing in the worst case...passkeys are wholly opaque. The ability to migrate them was considered an optional feature and not implemented before they were launched. It's still wholly unclear whether any individual implementation will let you do that or not, with options to prevent it.
- dylan604 1y agoAgain, it's us nerds making thing that didn't make it well enough that it causes pain on the end users. Not really sure how that's not the problem.
- porridgeraisin 1y agoStandards/specs set incentives which uniquely decide implementation quality. If after many years implementations backed by a variety of funding and brains _all_ suck, then it's the standard/spec's problem.
- Gigachad 1y agoPasskeys aren't tied to hardware. Basically every password manager syncs them between devices. If you just go the easy route of using the Apple/Google password manager you'll never lose access unless you lose your whole Apple/Google account.
- dylan604 1y agoExcept sibling comment to yours says that they are not so easily transferable. We're also discussing using a fob for the passkey. That's the physical hardware that I was referring. People keep tossing around Yubikey type of suggestions. How is that not hardware? Why do we keep making strange comments like this when they're clearly not true.
- Gigachad 1y agoThe Apple, Google, 1Password, etc managers sync Passkeys to your account between all devices. Sure, if you specifically use a hardware device like a Yubikey then you can physically lose it but most people will never have a hardware authenticator.
- qwerpy 1y ago> unless you lose your whole Google account I’ve seen enough horror stories here that this can’t be handwaved away.
- filcuk 1y agoDon't use Google then.
- esseph 1y agoThere are device-bound passkeys.