shrek_is_love@lemmy.ml to Privacy@lemmy.ml · 20 hours agoPasskeys are a trap. Do not use themnonfunctional.substack.comexternal-linkmessage-square104fedilinkarrow-up137file-textcross-posted to: privacy@programming.devcybersecurity@infosec.pub
arrow-up137external-linkPasskeys are a trap. Do not use themnonfunctional.substack.comshrek_is_love@lemmy.ml to Privacy@lemmy.ml · 20 hours agomessage-square104fedilinkfile-textcross-posted to: privacy@programming.devcybersecurity@infosec.pub
minus-squareNarrativeBear@lemmy.worldlinkfedilinkarrow-up44·19 hours agoNever used. Each time a website asks me if I want to create one I have this uneasy feeling of not actually owning the key.
minus-squarelemmyvore@feddit.nllinkfedilinkEnglisharrow-up5·edit-27 hours agoYou’re not wrong to have that feeling. Where is the passkey saved? Can I take it out and back it up? Can I use it on another device, running a completely different OS? If I lose this device the passkey is on, what happens? The answers to most of these is negative.
minus-squareRedGreenBlue@lemmy.ziplinkfedilinkarrow-up21·17 hours agoThat is the issue of passkeys. They are hard to understand and without understanding there can be no trust.
Never used. Each time a website asks me if I want to create one I have this uneasy feeling of not actually owning the key.
You’re not wrong to have that feeling.
Where is the passkey saved? Can I take it out and back it up? Can I use it on another device, running a completely different OS? If I lose this device the passkey is on, what happens?
The answers to most of these is negative.
That is the issue of passkeys. They are hard to understand and without understanding there can be no trust.