Thread

1. wg0 · 1789734711 · focus · HN ↗

   They really are bad. Passkeys have turned out to be just another password that you cannot even memorize.

   1. john_strinlai · 1789735433 · focus · HN ↗

      >just another password that you cannot even memorize

      there's some issues with passkeys, but not being able to memorize them is a feature

      1. wg0 · 1789736792 · focus · HN ↗

         So where do I keep my pass keys is the problem. They are in my password manager just like another password. So what's the point of having them because effectively, the passwords in the password manager and the passkey in the password manager offer the same UX to me? Except that at least I can memorize a password by heart just in case.

         1. john_strinlai · 1789736908 · focus · HN ↗

            >They are in my password manager just like another password. So what's the point of having them because effectively, the passwords in the password manager and the passkey in the password manager offer the same UX to me?

            same ux, different security properties.

            1. xboxnolifes · 1789750900 · focus · HN ↗

               The password is the recovery flow. What do you propose instead that isnt just a variation of having a password and a passkey?

               1. john_strinlai · 1789753997 · focus · HN ↗

                  a memorized password is not part of a well thought out recovery flow.

                  double triple emphasis on "memorized"

                  1. xboxnolifes · 1789766807 · focus · HN ↗

                     Ok, I write my password down. Now what?

                     1. john_strinlai · 1789768550 · focus · HN ↗

                        the same advice as the last few decades:

                        place it in a fireproof safe alongside your other important documents, like your passport and birth certificate.

Unofficial Hacker News client; not affiliated with Y Combinator.