Technology

63009 readers

3364 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago

MODERATORS

[email protected]

513

Big Tech passkey implementations are a trap | Proton (proton.me)

submitted 10 months ago by AnActOfCreation to c/[email protected]

219 comments fedilink hide all child comments

Big Tech has implemented passkeys in a way that locks users into their platforms rather than providing universal security
Passkeys were developed to replace passwords for better account security, but their rollout by Apple and Google has limited their potential
Proton Pass offers passkeys that are universal, easy to use, and available to everyone for improved online security and privacy.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 35 points 10 months ago* (last edited 10 months ago) (2 children)

I'm well versed in IT security, and even with (or because of) my knowledge, I still haven't looked deep into setting up passkeys on my services. Just because it's such a clusterfuck of weird implementations.

I can't imagine being a normal consumer and wanting to set them up. The poor support teams having to support this...

And I'm managing at least one service at work that could totally benefit from passkey integration. The headache of looking into how to properly implement them is just way too much

[–] [email protected] 3 points 10 months ago (1 children)

I can't imagine being a normal consumer and wanting to set them up.

It’s quite simple on iOS. IIRC, when logging into the paypal website you get a prompt asking if you’d like to use passkeys. Accept that, then you get a keychain prompt asking if you’d like to make/use a passkey. Click continue and pass FaceID authentication, then you’re in with a passkey. For future logins you click the login with passkey and it faceIDs you in. It’s easy.

[–] [email protected] 37 points 10 months ago (2 children)

Then you are totally locked in with Apple devices and cannot switch to Android and take your passkeys with you

[–] [email protected] 6 points 10 months ago* (last edited 10 months ago)

I’m not saying it’s good, I’m saying it’s easy. It is not hard for normal consumers to setup.

[–] [email protected] -1 points 10 months ago* (last edited 10 months ago)

Go to site->change password->use whatever you want moving forward.

Passwords are not a great way to lock in users unless they’re are completely unmotivated to change services, in which case - iOS passkey or not - it’s all moot.

[–] [email protected] 3 points 10 months ago

What does secrets management look like at work?