Comment by zdp7
5 days ago
It breaks the traditional login paradigm. I had a hard time trying to setup a single device as my passkey manager. Now I realize that you should make one on all your devices. My bank website, I have my password and two separate passkeys. Individual sites may have an implementation issue, but in that case I use the more troublesome password workflow. I still come across password implementation issues on some sites.
Interesting. I still want to be able to login if all my devices are stolen/destroyed. Guessing people will be in pickles after natural disasters.
Good tip!
I still can use my password. I use the passkeys for the convenience and extra security. If I lost all my devices I would just login with my password and add a new passkey. I would also remove any for devices that I don't control or are damaged. I suspect even if the site were passkey only, they would have some account recovery workflow.
The thing the people are also sometimes missing is that I leave my YubiKey at home... especially in those situatiosn where I am prone to lose it.
Going to a concert - I'll take my phone but not my YubiKey, etc.pp
And if I enroll 2 YubiKeys, I can deposit one safely at home. I want my phone to be less important, not more important.