558

Take your passkey and shove it where the sun don't shine (lemmy.world)

submitted 3 days ago by cm0002@lemmy.world to c/memes@lemmy.world

112 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[-] yesman@lemmy.world 5 points 3 days ago* (last edited 3 days ago)

I didn't consider the friction of integrating it into your existing process because I use a manual password manager. But who is saying you should replace a password manager with passkeys? It was always meant to be a parallel system.

Edit: I just wanted to add that people like you and I who have "solved" our credentials problems are a tiny minority. Passwords are shit. Just because we've grown accustomed to them doesn't change that.

[-] WhatAmLemmy@lemmy.world 5 points 2 days ago

You'll find that nobody has a problem with passkeys specifically. They have a problem with the implementation, and companies forcing passkeys onto users who don't want or need them.

I don't need passkeys because I use a password manager. My threat model requires that I can restore my password manager, all 2FA, and regain full access to all my accounts from anywhere in the world, even if a natural disaster occurs and all my devices are destroyed.

Passkeys and SMS 2FA are a direct threat to my threat model, and I can't help but feel they're designed to further entrench surveillance capitalism, and the invasion of privacy as a prerequisite for security.