Tim BrayPasskeys were hot last year, don’t seem to be catching on, here’s one view of why that is. Dark and sobering but convincing: https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/
Stuart Langridge@timbray ah, I have looked at passkeys a couple of times and feared them because of lock-in, and this suggests that I'm not the only one thinking it!
Tanner B 🆓🇵🇸@objc @timbray as far as I can tell, though, I can't move *between* OSes. If I set up my current phone as holding my passkeys, and then I change to a different phone (OS), I am just flat-out stuck; I cannot export my passkeys, or store them myself in some neutral format, or export them to a different device. I might be wrong on this, but every time I've asked I've got that answer, or no answer. If that's changed then I'll be happy to look again.
Mike Beasley@MikeBeas @sil @objc So if I'm using 1password and syncing between my laptop & phone, the same passkey can be used on both?
[Definitely getting the feeling that 1Password is the leader at making these things usable. Having said, that, I have yet to convince any nontechnical person to use any password manager aside from the ones in the browsers.]
@timbray @sil @objc Yes, it works like anything else you sync via a password manager. Several password managers support them.
For non-technical users, storing them in the system keychain is fine. They’re end-to-end encrypted and synced via iCloud or the Google password manager, same as regular passwords. You can scan a QR code on other devices that aren’t able to sync them (Windows or whatever) and login from your phone. It’s a pretty painless process.
Matthew Abbott@MikeBeas @timbray @sil @objc Do most people “go looking for” posts on a topic on a platform that resisted basic search?
This isn’t a scientific discussion, nor did you back your assertion with the type of “scientific proof” you demand of others. Anecdotal evidence of difficulties *is* evidence a feature is less than intuitive, enough to indicate an observational study. I believe I have a contact at a psych department if you want to fund that.