tobsen, 8 months ago

@Schrank Heard about Passkeys in multiple podcasts. The only issue the had was exporting them to other managers. Apple and 1Password support this. Apple also via system API.
(Recovery is an other issue, but it means more security)

Flyingmana, 8 months ago

@Schrank @1password this one big possibly evil company called Google noticed that many people have problems remember passwords, or keep them save enough so nobody else gets access to them.
So they invented a new way to authenticate which works without inputting a password.

personal note: I did not look into it yet, but its probably a protocol which does the authentication handshake directly with the password manager.

Schrank, 8 months ago

@Flyingmana @1password So passkeys run through google server? That sounds like "facebook" login. And I don't want this, I have a password manager 😂 ... But I guess I'll leave it on. Better have it in 1P than somewhere else, if people want to use it 🙈

Flyingmana, 8 months ago

@Schrank @1password its probably more a signature or certificate handshake between Website and PasswordManager.

So google is only involved when you use their password manager.

timwolla, 8 months ago

@Schrank @Flyingmana “PassKey” is the marketing name for WebAuthn discoverable credentials (formerly known as resident keys). Any modern YubiKey supports (a limited amount of) discoverable credentials. There is also software based support for PassKeys that use your operating system’s keyring, e.g. you Android screen lock or Apple’s fingerprint reader.