4 ms·
> Among other things, they are completely unfishable. From what I've heard, they're also unbackupable, and tied to the ecosystem used to create them (so if you
by cesarb 1y ago
> Among other things, they are completely unfishable.
From what I've heard, they're also unbackupable, and tied to the ecosystem used to create them (so if you started with an Apple desktop, you can't later migrate the passkeys to a Windows desktop, you have to go to every single site you've ever used and create new ones).
- smw 1y agoYou can't really backup hardware tokens, either? It's quite possible to use something like bitwarden/vaultwarden/1password as a password manager, and you can "backup" tokens quite easily without being tied to a particular mobile/desktop ecosystem.
- frizlab 1y agoThat’s not true anymore; you can migrate passkeys to another password manager now.
- yawaramin 1y agoYou can just create a new passkey on the new device after logging in. It's a non-issue.
- 3eb7988a1663 1y agoIt is not a given that multiple services let you enroll multiple keys. How many year did it take before Amazon allowed multiple Yubikeys? Which means you are in a real pickle if you ever lose your one hardware device with keys (lost, stolen, bricked, whatever).
- yawaramin 1y agoIt's an incorrect implementation, the same as when eg an account provider truncates a long password to 8 characters.