End of passwords? | Will Passkeys replace passwords?

[@cybernews]

🔐Experience the power of PassKeys today with our Best Password Manager choices: ✅ NordPass - discount applied ➡ cnews.link/get-nordpass-offer/QlJNJth_pP0/ ✅ 1Password - discount applied ➡ cnews.link/get-1password-offer/QlJNJth_pP0/

[@neuideas]

I find Passkeys intriguing. I'm concerned over painting myself into a corner with them, though. Having a backup method of logging in will be essential, which negates the security of Passkeys, but does allow them to be convenient.

[@AlessandroBottoni]

PassKeys are NOT intended to *replace* passwords but to *complement* them. They are just an extension of the same concept that brought us to "Password Managers": use a single "master password" to manage *all* of your passwords. The only difference is that in the case of "password mnanagers" and passwords you use a "master password" (and, maybe, a 2FA token) while in the case of PassKeys you use your fingerprint (or face) as a master password and your device as a "proxy". They are a "proxy" (a "placeholder") for your passwords, not a replacement. They are not intended to improve *security* but to improve *usability*.

[@bigjoegamer]

Passkeys are intended to improve security *and* usability. Passkeys aren't phishable, but passwords are phishable. A passkey can't be used for anything but the app/site it is generated for, and a passkey can't be typed. It means phishing won't work on passkeys, but it does unfortunately work on passwords. Passkeys are stored on your device or password manager, but passwords are stored on servers where they can be stolen in data breaches, or they can be stored somewhere in plain text. If someone gets into a server that stores passkeys, then they only get your "public key", which can do nothing harmful without the "private key", the part of your passkey that stays on your device or your password manager.

[@jx5189]

Passwords are always going to exist even when passkeys become ubiquitous. You will have to have another way to get into the account if you lose the passkey imagine CS. if they didn't.

[@gmailaaaa]

Can we create a new Google account while using only passkeys? If yes, then sure, it can replace passwords. Also, can we choose a different name for passkeys? It sounds horrible.

[@xoso599]

Passkey are built around the questionable statement that hardware can never be tricked, subverted, side channel attacked or just lied to, to get the data needed to access something.

[@StijnHommes]

Are you really still spewing this misinformation? Passwords are here to stay, especially since passkeys are not actually secure AT ALL. You use less layers of security and using passkeys means that if someone gains access to your phone ALL your accounts are compromised, not just one. That is an unacceptable risk.

[@grauerHase]

Not sure what the advantage is vs. mfa, password + Yubikey. I really dislike the idea of tying my phone and/or biometrics to my logins.

[@bigjoegamer]

You don't have to tie your phone and/or biometrics to your logins. Passkeys work without phones and without biometrics. Passkeys work with PIN, password, security key, or biometrics, and can be stored on your laptop/desktop PC or on your password manager. If you have a laptop or a desktop PC with a CPU that was manufactured within the last 5 years, then you can probably use and store passkeys without a phone, and can definitely use them without biometrics.

[@hellopsp180]

you literally put phishing links in the flipping description

[@mortensgaard7466]

i take password