Ancestors

Written by exu on 2024-10-16 at 06:59

Passwords have problems, but passkeys have more

https://feditown.com/post/744774

=> More informations about this toot | More toots from exu@feditown.com

Written by sir_pronoun@lemmy.world on 2024-10-16 at 07:18

I’d be interested in a discussion of his points here :) those sound like valid points he’s making

=> More informations about this toot | More toots from sir_pronoun@lemmy.world

Written by asap@lemmy.world on 2024-10-16 at 07:40

Even in the best case scenario, where you’re using an iPhone and a Mac that are synced with Keychain Access via iCloud

Surely the better-case scenario would be using a password manager?

Without addressing the point of using a password manager, the article seems kind of irrelevant.

=> More informations about this toot | More toots from asap@lemmy.world

Written by sir_pronoun@lemmy.world on 2024-10-16 at 07:41

But that is exactly what he recommends, using a password manager - with one time email authentication for the first login as an extra step, right?

=> More informations about this toot | More toots from sir_pronoun@lemmy.world

Toot

Written by hedgehog@ttrpg.network on 2024-10-16 at 20:05

But that is exactly what he recommends, using a password manager - with one time email authentication for the first login as an extra step, right?

Nope.

Using a cross-platform password manager with synced passkeys is different and much more secure than using a password manager with email TOTPs or sign-in links with emails that aren’t end-to-end encrypted.

And password manager adoption is much higher than PGP keyserver adoption, and if you can’t discover someone’s public key you can’t use it to encrypt a message to them, so sending end-to-end encrypted emails with TOTPs/sign-on links isn’t a practical option.

According to Statista, 34% of Americans used password managers in 2023 (a huge increase from 21% in 2022), so it’s not even like the best case scenario is rare.

=> More informations about this toot | More toots from hedgehog@ttrpg.network

Descendants