Gawd sometimes I hate passkeys.

I have to deal with some fairly old people - people who have lost much of their vision and who have never been particularly technically minded.

The modern race-to-lock-everything has moved a lot of services (such as outlook) to move to passkeys.

That's nice - unless one is trying to deal with problems for an old person who is 800 miles away.

It appears that many of these services treat having a passkey as a one-way ratchet. Once someone (me) has set up a passkey (limited to my computer and phone) then the service switches to demand a passkey rather than the password to get in - but the old person's phone/computer does not have the passkey nor knows how to use it even if they did.

Our present Internet - largely programmed by young people with tech knowledge and good eyesight - is becoming increasingly hard to use by older people while things (like medical services) increase security that these people do not know how to use and can't be managed remotely.

RE: https://infosec.exchange/@flyingpenguin/116399482954754093

Can I bring your attention to one of the best security write-ups I’ve read in a long while.

Bravo, Davi.

@mttaggart flagged this one to me.