I see the #Google UX team are as bad as ever... had a prompt to "verify my identity" - next - "use passkey" - yes - "Create a new password" - um, what? Where did that come from.

Also, the Google passkey implementation is among the worst. Every time I use it, it tells me I still need to enter my password, leaving me wondering what the point was in creating it.

I assume that password "expired" but it would have been nice to be told that instead of just "Create a new password." #infosec #passkey

Passwortlose Authentifizierung mit Passkeys, FIDO, SSO und mehr

Wie man FIDO2 und SSO in Webdienste integriert: Konzepte, Protokolle und Best Practices für eine sichere Authentifizierung mit und ohne Passwort.

https://www.heise.de/news/Passwortlose-Authentifizierung-mit-Passkeys-FIDO-SSO-und-mehr-11219217.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#IdentityManagement #IT #iXWorkshops #Passkey #ZweifaktorAuthentisierung #news

Here’s one for the passkey implementation hall of shame.

1. The Lowe’s UI for managing passkeys gives the impression they’re disabled by showing this introductory text, TOS checkbox, and an Enable Passkey button. But they’re already active. That’s just how you register a new key.

2. The key list has no registration date, last-used date, or ability to edit the title. I have a passkey registered in 1Password and one on a YubiKey. Both are permanently named “Mac OS_Firefox”.

#passkeys #passkey

I’m unable to sign into my Apple developer account with even #Safari now. I don’t see the Sign in with #Passkey button. All I can do is sign in with my password and then the site says that my account is locked.

It all works fine with Firefox. I can sign in with my passkey and all is well.

I disabled all extensions and still no go. What's going on.

#AppleDev

Passkey vs password: What is the difference? | Proton https://proton.me/blog/passkey-vs-password

#password #passkey #security

#Passkey vs #password: What is the difference?

https://proton.me/blog/passkey-vs-password

#cybersecurity #guide