Digital's Lemmy
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
lemmydividebyzero@reddthat.com to Technology@lemmy.worldEnglish · 1 month ago

I don't like passkeys | Ethan Hawksley

hawksley.dev

external-link
message-square
157
link
fedilink
206
external-link

I don't like passkeys | Ethan Hawksley

hawksley.dev

lemmydividebyzero@reddthat.com to Technology@lemmy.worldEnglish · 1 month ago
message-square
157
link
fedilink
Why passkeys are a step back for personal security: examining account lockout risks, platform lock-in, hardware key limits, and fragile recovery flows.
  • ѕєχυαℓ ρσℓутσρє@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    1 month ago

    I don’t understand one thing about hardware keys. Aren’t they, like, easy to steal? Sure, someone could torture my Bitwarden masterkey out of me, but hardware keys seem to make sabotage much much easier.

    • Natanael@infosec.pub
      link
      fedilink
      English
      arrow-up
      5
      ·
      1 month ago

      You can PIN lock hardware keys

      • ѕєχυαℓ ρσℓутσρє@lemmy.sdf.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 month ago

        That’s good to know.

    • 4am@lemmy.zip
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 month ago

      They’re as easy to steal and misuse as a laptop with KeePassX on it. Hardware as a second factor was always a better use case.

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @L4s@lemmy.world
  • @autotldr@lemmings.world
  • @PipedLinkBot@feddit.rocks
  • @wikibot@lemmy.world
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 3.52K users / day
  • 9.64K users / week
  • 13.2K users / month
  • 17.5K users / 6 months
  • 1 local subscriber
  • 89.2K subscribers
  • 2.14K Posts
  • 42.7K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • L4sBot@lemmy.worldB
  • enu@lemmy.world
  • Technopagan@lemmy.world
  • L3s@hackingne.ws
  • BE: 0.19.20
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code
  • join-lemmy.org