Comment by idle_zealot
3 years ago
Isn't that the point of Passkeys? The user isn't allowed to interface with them directly, so social engineering can't compromise them [1]. Rather than move your passkey between devices, you're meant to generate a different passkey for each device, then register all of them with the relevant service, like SSH keys.
1: of course, a user could still be tricked into adding an attacker's passkey to their account or something
But 1Password syncs your passkey to all your devices, so you only have one.
Don't worry, if you lose your passkey all you need is access to your email to receive a password reset link. </sarcasm>
That's literally the solution to "What if I lose all the passkeys associated with my account and I've also forgotten my password?"
3 replies →