← Back to context

Comment by peterzat

6 days ago

Right, but... I can already store my credentials in a password manager and enable MFA. I understand the pitch, but Passkeys seem to buy me very little as a user and add significant brittleness.

Most password managers allow passkey creation and storage. Most cyber attacks these days are initiated by phishing. If you get hammered one night and open a bogus link, you can still complete the pass/OTP combo, but a passkey will simply refuse to sign a domain that's not tied to