A rebuttal to an anti-passkey, pro-TOTP post that has made the rounds on Lemmy as well.

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 1 week ago (2 children)

They don't need to. It just works to log them in when they're using one of their own trusted devices. Being able to unlock their phone gives them full access to the services (apps, websites) that are authenticated to that device.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 week ago (1 child)

    I know that, and you know that, but passkeys are supposed to solve security-related problems by reducing friction.

    What passkeys can't overcome is people dismissing the popups asking if they want to switch to passkeys or create them.

    The problem with passkeys is they are 20 years too late, and no one cares.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 week ago

    What passkeys can't overcome is people dismissing the popups asking if they want to switch to passkeys or create them.

    I think it'd actually be pretty easy. Just ask:

    Trust this device, with biometrics?

    Most people will say yes on their Apple/Samsung/Google devices.

  • source
  • parent