Any credential system that makes it impossible to write something down on a piece of paper, take it to a new computer, and login to a website is just a gateway to vendor lock-in.

And don’t tell me that we can “securely transfer” the credential from one vendor to another, because that’s just a lock-in syndicate.

The “something” doesn’t have to be a password! It could be a UUID. It could be Base64. But “you’ll get nothing and like it” is not an acceptable alternative.

@lapcatsoftware I’ll just leave this here

Imagine your whole digital life, including passwords and passkeys, in the hands of these guys

And they just lock you out, poof, all gone https://hey.paris/posts/appleid/

20 Years of Digital Life, Gone in an Instant, thanks to Apple

Summary: A major brick-and-mortar store sold an Apple Gift Card that Apple seemingly took offence to, and locked out my entire Apple ID, effectively bricking my devices and my iCloud Account, Apple …

Dr Paris Buttfield-Addison