Looks like a huge amount of security vendors are working to have a secure and open standard for passkey portability between platforms.

It is always good to see major collaboration in the security space like this considering the harsh opinions that users of some of these vendors have toward many of the others. I just wish apps and sites would stop making me login with username and password if passkeys are meant to replace that lol.

  • umbrella@lemmy.ml
    link
    fedilink
    arrow-up
    5
    arrow-down
    14
    ·
    edit-2
    1 month ago

    yay glorified, overcomplicated passwords!

    i get hate for it but just use a password manager if you can’t juggle them?

    • Soothing Salamander@lemmy.mlOP
      link
      fedilink
      English
      arrow-up
      11
      ·
      30 days ago

      I think it is quite the opposite for the end user. If apps/websites, begin to replace traditional password login with passkeys, this will be a measurable improvement for average consumers.

      • umbrella@lemmy.ml
        link
        fedilink
        arrow-up
        1
        arrow-down
        9
        ·
        30 days ago

        not really an improvement if you need extra software for it.

        and cant just easily login.

        • LazerFX@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          15
          ·
          30 days ago

          In one sentence, you say, “just use a password manager”, on the next, “not really an improvement if you need extra software”. I’m not sure what argument you’re having, but neither one really addresses what this article is about.

          This keeps the passkeys in the password manager (I use dashlane, it rocks, and synchronises the passkeys just like the passwords), but this new protocol allows you to change and export the passkeys to other password managers, preventing vendor lock in and allowing for transfer to another password manager.

          Hope this clarifies things! And everyone should use a password manager of some kind; we should expect whatever site we’re using to be hacked, and the only way to be safe is to have a unique password per site.

            • humorlessrepost@lemmy.world
              link
              fedilink
              English
              arrow-up
              10
              arrow-down
              1
              ·
              30 days ago

              Jesus fucking christ this is like listening to Jason from The Good Place try to argue a point about encryption.

              • umbrella@lemmy.ml
                link
                fedilink
                arrow-up
                1
                arrow-down
                7
                ·
                30 days ago

                just waiting for it to happen. many articles glowing it up, but only corporations proceeding with vendor lockin.