I think most people do not like them because the default is to let your OS store them, device locked, in a TPM.
More password managers need to support them. I store all mine in Bitwarden although given what seems to be going on there I don’t think I can recommend them anymore.
a password, and the concept, are also easier to comprehend. passkeys for most is just fairy dust and magic.
another consideration is something you have or something you are are different from something you know. phishing and hackers or scammers are not the only dangers to protect yourself from.
I suspect this is why Microsoft is forcing users into it. Not that I agree with or am defending that decision.
I can’t stand being forced into magic link email logins which are designed to also deal with phishing. Takes longer to login compared to Passwords+TOTP or Passkeys and email isn’t exactly private for the majority.
They aren’t magic. Its the same cryptographic signature primitive seen in applications like PGP or blockchains/cryptocurrencies.
I agree to most users they feel magical and are more difficult to reason about. You still “have” a private key stored on the device, but its invisible to the user, so it’s not something you “know”.
My passkeys are stored on my phone, I just scan a QR code and they’re sent over to the PC for that login. I’ve never seen the default on Windows be anything but this.
Yeah I need to check out vaultwarden. Huge disappointment as its been a great product, but I’m not liking where the recent website changes are heading.
I think most people do not like them because the default is to let your OS store them, device locked, in a TPM.
More password managers need to support them. I store all mine in Bitwarden although given what seems to be going on there I don’t think I can recommend them anymore.
a password, and the concept, are also easier to comprehend. passkeys for most is just fairy dust and magic.
another consideration is something you have or something you are are different from something you know. phishing and hackers or scammers are not the only dangers to protect yourself from.
I suspect this is why Microsoft is forcing users into it. Not that I agree with or am defending that decision.
I can’t stand being forced into magic link email logins which are designed to also deal with phishing. Takes longer to login compared to Passwords+TOTP or Passkeys and email isn’t exactly private for the majority.
They aren’t magic. Its the same cryptographic signature primitive seen in applications like PGP or blockchains/cryptocurrencies.
I agree to most users they feel magical and are more difficult to reason about. You still “have” a private key stored on the device, but its invisible to the user, so it’s not something you “know”.
My passkeys are stored on my phone, I just scan a QR code and they’re sent over to the PC for that login. I’ve never seen the default on Windows be anything but this.
Yeah I need to check out vaultwarden. Huge disappointment as its been a great product, but I’m not liking where the recent website changes are heading.