Comment by palata

7 days ago

I am a little confused because they make the difference between a "passkey" and a "security key". But I use my Yubikeys as passkeys...

Does it not count as "passkey" then?

3 comments

palata

Reply
derfurth  7 days ago

I was confused also, I use my Yubikey a passkey, so I did not get the rant.

Yubikeys can be used as a device-bound passkey, that the FIDO2 thing.

Now software managed passkeys are also a thing and can be stored in a (good?) old password manager, of course this is less secure and could be disallowed in the future.

Thus the rant is about people without dedicated hardware keys that would have to use things like device-bound passkeys their OS instead of their password manager.

  • HideScore  7 days ago

    Yes it's very common on sites, and even somewhat forced to have these digital passkeys. It's almost automatic setup and there's a lot of skepticism about them.