pull down to refresh

55 sats \ 3 replies \ @kepford 5 Aug \ parent \ on: Passkeys are just passwords that require a password manager - Dan Fabulich security
Not being able to export your passkeys makes you dependent on the password manager.

Is it not possible to migrate between tools? I don't mean that companies aren't implementing this. I mean is it not allowed by the spec.

But again. The people that need this are not you and I. Its people that WILL export their keys in plain text on their desktop...

write
preview
102 sats \ 2 replies \ @ek 5 Aug

There's a spec for import and export and a 1Password blog post about it

If that solves vendor lock-in, then I'm just worried about possible attestation stuff

reply
77 sats \ 1 reply \ @kepford 5 Aug

For the record. I'm not SOLD on passkeys as the solution but there's a lot more right with it than wrong. And passwords are just far too easy for people to screw up. There have been other attempts to replace them in the past and who knows if passkeys will catch on.

reply
100 sats \ 0 replies \ @kepford 5 Aug

One of the attempts was SQRL - Secure Quick Reliable Login

reply