Typing a password slows you down, so now you'll need to enter a 2fa and a password. Fucking brilliant!

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 12 hours ago (3 children)

Passkey's are good in theory. But the amount of them that have implemented incorrectly and don't save. Or can't find the passkey and let you just input a password or email a link is dumb.

I'm sticking with MFA using a different service for my MFA from my password manager.

I'll maybe use passkey's for more sensitive information like banks.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 12 hours ago* (2 children)

    I have literally never had this problem. Passkeys are a strictly defined protocol as far as I'm aware.

    I'd be really curious to know what services you've used that had this problem. Or what hardware you tried to save it on that didn't work.

    And yeah, implementing passkeys but allowing login with a password or email link is just wrong. No defending that.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 9 hours ago (1 child)

    My issue with passkeys is that they're tied to devices and ecosystems, and I don't always use the same devices or browsers. I also want to keep work and personal stuff separate. I deliberately store my passwords and MFA in different services so one breach doesn't expose both.

    I use different systems for different things. I sometimes work from home and pay bills at work, but I absolutely don't want personal access stored on my work machine.

    I've also had passkeys fail to register properly and had to remove them and start over. Even Microsoft documents registration issues.

    Maybe passkeys will get there, but between setup issues and keeping everything working across devices and browsers, they're not as simple as they're made out to be. I prefer having control over where my credentials are stored and backed up. Everyone is different, but this new passkey push is not a good fit for me until things get smoothed out.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 6 hours ago

    For your specific use case I recommend Yubikey for for passkey storage. It works everywhere a local device-stored passkey works but it's portable.

    It's what I personally use for the exact reasons you describe

  • source
  • parent