Content
@
0 reply
0 recast
0 reaction
Kyle McCollom
@kyle
It sounds like people’s biggest knock against passkeys is that where they are stored is siloed to the Apple or Android ecosystem, so when a user changes platforms, they have a hard time accessing. This seems fairly edge case, solvable via a migration tool, and not a good enough reason to lose the ease of passkeys.
8 replies
3 recasts
32 reactions
woj
@woj.eth
1password army
0 reply
0 recast
4 reactions
Garrett
@garrett
The handoff of them between mobile and desktop is the biggest Ive had with them
1 reply
0 recast
3 reactions
eric.base.eth 🔵
@ericbrown.eth
100% an edge case. Apple’s security for passkeys is incredibly strong. Credentials managers are also an option with only slightly weaker security with easy portability. A helpful article outlining the security of passkeys in iCloud Keychain https://evmbrahmin.com/blog/iCloud-keychain-passkeys-guide.html
0 reply
0 recast
2 reactions
abram
@abram
this, and, there's a deeper single point of failure concern if the relaying party (ie domain issuing the challenge) were to go offline. afaik passkeys are scoped exclusively to the relaying party (hence their security). getting the right mix of hardness and usability with passkeys is non trivial...
0 reply
0 recast
0 reaction
welp 🎩🌸
@we
More immediately solvable by using 1password?
1 reply
0 recast
4 reactions
nick.base.eth
@nickprince.eth
Dashlane works beautifully
0 reply
0 recast
1 reaction
Nitya
@nitya
It’s a bit deeper than that! Passkeys’ biggest benefit and shortcoming is that they are tied to physical devices/hardware. IMO why robust solutions need a good solve for multi-platform/device (eg we had to build a ton of additional infra to support this for /capsule )
0 reply
0 recast
0 reaction
0xlapi 🎩
@0xlapi
I just store them in 1password because of this. But yes, that would be my main concern, that I don't have any control over them and I could just as easily lose them if I change a device and are not careful enough. I'd bet a LOT of people would lose crypto this way.
0 reply
0 recast
0 reaction
