Looks like a huge amount of security vendors are working to have a secure and open standard for passkey portability between platforms.

It is always good to see major collaboration in the security space like this considering the harsh opinions that users of some of these vendors have toward many of the others. I just wish apps and sites would stop making me login with username and password if passkeys are meant to replace that lol.

  • Soothing Salamander@lemmy.mlOP
    link
    fedilink
    English
    arrow-up
    11
    ·
    2 months ago

    I think it is quite the opposite for the end user. If apps/websites, begin to replace traditional password login with passkeys, this will be a measurable improvement for average consumers.

    • umbrella@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      2 months ago

      not really an improvement if you need extra software for it.

      and cant just easily login.

      • LazerFX@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        15
        ·
        2 months ago

        In one sentence, you say, “just use a password manager”, on the next, “not really an improvement if you need extra software”. I’m not sure what argument you’re having, but neither one really addresses what this article is about.

        This keeps the passkeys in the password manager (I use dashlane, it rocks, and synchronises the passkeys just like the passwords), but this new protocol allows you to change and export the passkeys to other password managers, preventing vendor lock in and allowing for transfer to another password manager.

        Hope this clarifies things! And everyone should use a password manager of some kind; we should expect whatever site we’re using to be hacked, and the only way to be safe is to have a unique password per site.