Robert Kingett1d ago
For a while I thought #PassKeys were like a tech hype thing so big tech could lock us into their ecosystems even more, and then I started looking into them and their advantage became far clearer to me. They still have a bunch of problems for people like me that change their devices frequently, at least in internet time.
I dislike the idea of being locked out of my stuff because my device is bricked, so I started looking for ways to use PassKeys with something like #KeePass databases. The bad news for us blind folk, the more accessible Keepass app doesn't have PassKey support. The far less screen reader friendly #KeePassXC has far better PassKey support, but, as I said before, not half as screen reader friendly as the OG KeePass is, unless I am missing something.
#StrongBox, which is accessible on iOS can work with PassKeys though. This way, you can't be tied to one device.
Show threadNick1d ago

@WeirdWriter I'm personally a bit bearish on passkeys. I'm totally in favor of replacing password auth with key-based auth. My two beefs with passkeys are that I would like to be able to tie them to a hardware auth device if I choose*, and I dislike how in most contexts they seem to assume you're locked into someone's walled garden (be that Apple, MS, or Google).

That being said, if one is going to use them and not bind them to a hardware key, this seems like a good approach. And I think it's especially important that anything as foundational as authentication be accessible. I'm curious what people think is the better path to remedying this situation, adding passkey support to KeePass or improving accessibility of KeePassXC? And I wonder if throwing some money toward one or the other might help fix this (for those of us who would be so inclined).

* If anyone reading is interested in the particular issues using hardware keys with passkeys, I talk about it a bit in this thread (though I'm no expert):
https://mathstodon.xyz/@internic/115469013411719424

Show threadNate Allen1d ago
@internic @WeirdWriter I've found #1Password to have an excellent passkey experience on both PC and Android and they're big proponents - they manage a directory of web sites and apps that have implemented them. I think their Apple equivalents are also well regarded.
Show threadJeffrey D. Stark
@internic @WeirdWriter @mossyfoot been super happy with it for years too
Apr 3 at 9:11pmWeb