Well, they're synchronized to my Apple account so that's not an issue. They're available on all of my Apple devices, or even ones I don't have right now that I log into in the future
Plus, none of the sites that I use passkeys for would I be locked out. They all have account recovery procedures just like if I forgot my password. And, finally, for the important ones like my Google account (where my email lives) I have other non-Apple devices like a Yubikey setup as additional Passkey/FIDO authenticators
I'm sure they exist but I have yet to come across a service that both removes the ability to also use a password when you register a passkey and also has no other recovery methods if your passkey (and/or password) become unknown or unavailable to you
In theory if I locked down my Apple account with the advanced protection features that are optional, I could lock myself out, but it would be on me to save recovery codes/secondary passkeys/etc during enrollment in those optional configurations
Otherwise, I'd walk into the Apple Store and they'd be able to get me back in my account if I didn't have some alternate method to get in
You do the acccount recovery flow. Options include providing your recovery key or proving your identity to Apple customer support. Do you really think Apple did not account for this?
Well, they're synchronized to my Apple account so that's not an issue. They're available on all of my Apple devices, or even ones I don't have right now that I log into in the future
Plus, none of the sites that I use passkeys for would I be locked out. They all have account recovery procedures just like if I forgot my password. And, finally, for the important ones like my Google account (where my email lives) I have other non-Apple devices like a Yubikey setup as additional Passkey/FIDO authenticators
> or even ones I don't have right now that I log into in the future
How do you log in without having the passkey?
I'm sure they exist but I have yet to come across a service that both removes the ability to also use a password when you register a passkey and also has no other recovery methods if your passkey (and/or password) become unknown or unavailable to you
In theory if I locked down my Apple account with the advanced protection features that are optional, I could lock myself out, but it would be on me to save recovery codes/secondary passkeys/etc during enrollment in those optional configurations
Otherwise, I'd walk into the Apple Store and they'd be able to get me back in my account if I didn't have some alternate method to get in
You have one Apple device that gets lost. You buy another and try to log in. Apple expects you to approve the login with the lost device. What now?
You do the acccount recovery flow. Options include providing your recovery key or proving your identity to Apple customer support. Do you really think Apple did not account for this?
2 replies →
Why would they be lost? They are synced to iCloud Keychain, which is E2E encrypted.