Comment by ShakataGaNai
5 days ago
Passkeys are FINE. The implementations suck.
The entire thing where some websites let you set them up, some force them on you, and some just surprise you.... sucks.
The fact that Passkeys don't have an easy migration path between secret storage tools is also a problem.
But if you know what you're doing they are not only perfectly safe, but REALLY safe. Much safer than any other option we have. And seriously way more convenient as well.
> And seriously way more convenient as well.
A point I don't see mentionned: switching accounts with passkeys is a PITA. Yes it's an implementation issue, there is no technical reason for sites to auto-log you with a passkey when you have one.
But as you point out it will be more convenient for a majority of people, so right now switching between multiple accounts when any of them has a passkey is a hell of itself.
Some password managers might handle it well now, I'd be curious to know as I'm won't be doing these kind of experiments again until there is a reasonable chance to go well.