A rebuttal to an anti-passkey, pro-TOTP post that has made the rounds on Lemmy as well.

you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 1 week ago (2 children)

Passkey is stored on propietary, trust me bro, “we will never share this with the NSA or FBI” Apple or something account where you can’t export them

No. Most FOSS password managers support them, even keepass and bitwarden. You control them, you can export them as you wish, and even use them across multiple devices. I know because I do this.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 1 week ago (1 child)

    Do you really believe your average Apple, Google/Android or Microsoft/Windows user use these?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 1 week ago*

    No, but the "normal, worst case" usage of passwords is still far worse than even that case. Most people just re-use the same password for everything. This is why almost all companies use phone numbers and text messages as a totp now.

    If we're comparing worst usage of passwords vs worst usage of passkeys, passkeys still wins.

  • source
  • parent