A lot of services support passkeys. Microsoft even has an option to make my account “passwordless”. Since they are more secure than passwords, will you be switching some / most of your accounts to passkeys any time soon? Interested to hear everyone’s thoughts on passkeys. 🔑
I highly dislike the idea of a passkey replacing a password as it means you’ve lost the something you know and replace it only with something you have.
Passwords AND passkeys together sound great.
To be fair, you cant use the passkeys unless you are logged into your password manager, which requires a password you “know”.
It could be your phone or computer as well, they don’t have to be in a password manager.
And that’s often going to be the default people use.
Now it’s just your face or fingerprint, both of which are easier to bypass if it’s targeted.
Well, then its still 2FA. Something you are and something you have.
Just in addition to my other reply… that was assuming it’s not a government agency.
The police can just force you to do it, but they can’t force a password.
Everyone using a passkey and biometrics on their hardware is law enforcements wet dream.
Edit: Including border security where you have less rights.
This exactly why I have a phone that lets me use two factors to unlock it, pin plus fingerprint!
It let’s you require both?
It looks like it’s pin and optional fingerprint, not pin and fingerprint for me? On Android
This is why I always turn it off in airports though.
Pin to unlock phone
Fingerprint to unlock work profile.
It’s just much weaker than a password and passkey / security key.
Something you are can easily be taken from you. (Edit: eg lifting fingerprints can unlock things)
Something you know is harder and would escalate a situation if forced substantially.