“Passkeys,” the secure authentication mechanism built to replace passwords, are getting more portable and easier for organizations to implement thanks to new initiatives the FIDO Alliance announced on Monday.

  • Gutless2615@ttrpg.network
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    1
    ·
    5 hours ago

    The shared secret with my Vaultwarden server? Add mfa and someone needs to explain to me how passkeys do anything more than saving one single solitary click.

    • 4am@lemm.ee
      link
      fedilink
      English
      arrow-up
      9
      ·
      3 hours ago

      When a website gets hacked they only find public keys, which are useless without the private keys.

      Private keys stored on a password manager are still more secure, as those services are (hopefully!) designed with security in mind from the beginning.

    • shortwavesurfer@lemmy.zip
      link
      fedilink
      English
      arrow-up
      9
      ·
      5 hours ago

      Pass keys are for websites such as Google, Facebook, TikTok, etc. And then they go into what is currently your password manager or if you don’t have one, it goes into your device. You still have to prove to that password manager that you are, who you say you are, either by a master password of some sort or biometrics.