4 ms·

>just another password that you cannot even memorize there's some issues with passkeys, but not being able to memorize them is a feature

blackdahlia313 15d ago
And this is why people bash passkeys, but they hear a buzzword lol
wg0 15d ago
So where do I keep my pass keys is the problem. They are in my password manager just like another password. So what's the point of having them because effectively, the passwords in the password manager and the passkey in the password manager offer the same UX to me? Except that at least I can memorize a password by heart just in case.
- john_strinlai 15d ago
  >They are in my password manager just like another password. So what's the point of having them because effectively, the passwords in the password manager and the passkey in the password manager offer the same UX to me? same ux, different security properties. >Except that at least I can memorize a password by heart just in case. "just in case" should be a thought out recovery flow, rather than hoping that you remember the password of the account you need to access.
  - xboxnolifes 15d ago
    The password is the recovery flow. What do you propose instead that isnt just a variation of having a password and a passkey?
    - john_strinlai 15d ago
      a memorized password is not part of a well thought out recovery flow. double triple emphasis on "memorized"
      - xboxnolifes 15d ago
        Ok, I write my password down. Now what?
        john_strinlai 14d ago
        the same advice as the last few decades: place it in a fireproof safe alongside your other important documents, like your passport and birth certificate.
- drdexebtjl 15d ago
  That is the point. They stop you from memorizing it “just in case” and reusing it, and they force you to use a password manager. For the average user, which doesn’t use a password manager, this is great. It means they can’t get phished. And it’s also great for the average password manager user, who keeps dozens of insecure and reused passwords in their vault because they manually thought of a password when signing up instead of randomly generating one. If you’re already using a password manager and random passwords, the UX is designed to be the same. It’s just a way to get regular people to do this.
  - Telaneo 14d ago
    > If you’re already using a password manager and random passwords, the UX is designed to be the same. In that case, they've completely and utterly failed.
account42 15d ago
A corportation's feature is a user's bug.
- deleted 15d ago
  [deleted]

blackdahlia313 15d ago

And this is why people bash passkeys, but they hear a buzzword lol

wg0 15d ago

So where do I keep my pass keys is the problem. They are in my password manager just like another password. So what's the point of having them because effectively, the passwords in the password manager and the passkey in the password manager offer the same UX to me? Except that at least I can memorize a password by heart just in case.

john_strinlai 15d ago
>They are in my password manager just like another password. So what's the point of having them because effectively, the passwords in the password manager and the passkey in the password manager offer the same UX to me? same ux, different security properties. >Except that at least I can memorize a password by heart just in case. "just in case" should be a thought out recovery flow, rather than hoping that you remember the password of the account you need to access.
- xboxnolifes 15d ago
  The password is the recovery flow. What do you propose instead that isnt just a variation of having a password and a passkey?
  - john_strinlai 15d ago
    a memorized password is not part of a well thought out recovery flow. double triple emphasis on "memorized"
    - xboxnolifes 15d ago
      Ok, I write my password down. Now what?
      - john_strinlai 14d ago
        the same advice as the last few decades: place it in a fireproof safe alongside your other important documents, like your passport and birth certificate.
drdexebtjl 15d ago
That is the point. They stop you from memorizing it “just in case” and reusing it, and they force you to use a password manager. For the average user, which doesn’t use a password manager, this is great. It means they can’t get phished. And it’s also great for the average password manager user, who keeps dozens of insecure and reused passwords in their vault because they manually thought of a password when signing up instead of randomly generating one. If you’re already using a password manager and random passwords, the UX is designed to be the same. It’s just a way to get regular people to do this.
- Telaneo 14d ago
  > If you’re already using a password manager and random passwords, the UX is designed to be the same. In that case, they've completely and utterly failed.

account42 15d ago

A corportation's feature is a user's bug.

deleted 15d ago
[deleted]