Comment by reddalo
1 month ago
But then you need to phisically carry it along with you everywhere you go, if you want to log into a service :/
1 month ago
But then you need to phisically carry it along with you everywhere you go, if you want to log into a service :/
Yes, it’s like a key. :)
Though realistically I use a passkey for services I care about and a password manager for the rest.
Keys can be copied very easily. It’s one of their primary features. Can you easily copy your USB key?
Physical keys can easily be copied, and physical locks can easily be picked. That might be fine for your house or storage unit, but for your bank account or your car (newer cars no longer have simple physical keys/locks), we've moved beyond that tech.
9 replies →
Yubikeys are Secure Enclaves designed to not be copyable
1 reply →
You can 'copy' it by registering a new one to the service.
That's not the problem for me - I carry a bunch of tokens with me anyway (all my banking stuff is on hardware tokens, for example). My problem is more: My browsers run in containers or VMs, intentionally without hardware access. Getting passkeys to work there would be quite a bit of effort.
And hope you don't lose it, or leave it in a pocket when you do the laundry, or plug it into a faulty USB port that zaps it, etc.
My yubikeys have survived dips in the ocean, spilled beers, run over by cars, dropped in pans of used motor oil, left out in thunderstorms, and multiple trips through the washer and dryer. They're still fine even after a decade.
Nothing survives the xkcd 538 wrench attack.