• sloppy_diffuser@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    1
    ·
    22 hours ago

    Passkeys are worth learning. Linux / GrapheneOS (de-googled Android) only household. This isn’t some Microsoft thing they are trying to push.

    Passwordless logins (or 2FA depending on the site). Uses the same public key cryptography primitives that pretty much the whole internet is built upon.

    Way more secure than passwords. The secret is never sent to the server you are logging into while passwords are which makes you a phishing target (noteable exception is opaque-ke). Users are trained to make crappy passwords and with passkeys there is nothing to memorize.

    The big commercial operating systems I’m pretty sure all support storing them with cloud syncing across your devices.

    If you care about privacy, password managers like BitWarden can handle them as well.

    Not sure if vaultwarden (self-hosted BitWarden) stores them if you don’t trust any cloud provider.