▲ 38 ▼ Passkeys are a trap. Do not use them. (nonfunctional.substack.com) submitted 1 week ago by cm0002@toast.ooo to c/cybersecurity@infosec.pub 19 comments fedilink hide all child comments
[–] TheButtonJustSpins@infosec.pub 7 points 1 week ago (5 children) So, if Bitwarden, all good? permalink fedilink source parent hideshow 5 child comments replies: [–] 4am@lemmy.zip 14 points 1 week ago Well…for now? Bitwarden looking to enshittify lately. But yes right now Bitwarden passkeys work great across multiple devices desktop and mobile. Been using them for a number of years now. permalink fedilink source parent [–] SW42@lemmy.world 6 points 1 week ago (2 children) I use vaultwarden with the bitwarden clients on my devices. Works a treat. Make sure you know what you’re doing and have an effective backup strategy if you decide on this! permalink fedilink source parent hideshow 2 child comments replies: [–] TheButtonJustSpins@infosec.pub 4 points 1 week ago (1 child) I'm pretty confident in my backups, but passwords are just too important for me to risk, especially since I've started using unique usernames and email addresses for accounts. permalink fedilink source parent hideshow 1 child comment replies: [–] SW42@lemmy.world 4 points 1 week ago Great opsec! I also have a catch all domain for usernames and use bitwarden generated complex passwords. I have a local backup and two off-site backups that themselves have redundancy so I should be fine. I hope :) permalink fedilink source parent [–] moldy_rice@piefed.keyboardvagabond.com 1 point 1 week ago KeePass. permalink fedilink source parent
[–] 4am@lemmy.zip 14 points 1 week ago Well…for now? Bitwarden looking to enshittify lately. But yes right now Bitwarden passkeys work great across multiple devices desktop and mobile. Been using them for a number of years now. permalink fedilink source parent
[–] SW42@lemmy.world 6 points 1 week ago (2 children) I use vaultwarden with the bitwarden clients on my devices. Works a treat. Make sure you know what you’re doing and have an effective backup strategy if you decide on this! permalink fedilink source parent hideshow 2 child comments replies: [–] TheButtonJustSpins@infosec.pub 4 points 1 week ago (1 child) I'm pretty confident in my backups, but passwords are just too important for me to risk, especially since I've started using unique usernames and email addresses for accounts. permalink fedilink source parent hideshow 1 child comment replies: [–] SW42@lemmy.world 4 points 1 week ago Great opsec! I also have a catch all domain for usernames and use bitwarden generated complex passwords. I have a local backup and two off-site backups that themselves have redundancy so I should be fine. I hope :) permalink fedilink source parent
[–] TheButtonJustSpins@infosec.pub 4 points 1 week ago (1 child) I'm pretty confident in my backups, but passwords are just too important for me to risk, especially since I've started using unique usernames and email addresses for accounts. permalink fedilink source parent hideshow 1 child comment replies: [–] SW42@lemmy.world 4 points 1 week ago Great opsec! I also have a catch all domain for usernames and use bitwarden generated complex passwords. I have a local backup and two off-site backups that themselves have redundancy so I should be fine. I hope :) permalink fedilink source parent
[–] SW42@lemmy.world 4 points 1 week ago Great opsec! I also have a catch all domain for usernames and use bitwarden generated complex passwords. I have a local backup and two off-site backups that themselves have redundancy so I should be fine. I hope :) permalink fedilink source parent
[–] moldy_rice@piefed.keyboardvagabond.com 1 point 1 week ago KeePass. permalink fedilink source parent