We had originally planned to go all-in on passkeys for ONCE/Campfire, and we built the early authentication system entirely around that. It was not a simple setup! Handling passkeys properly is surprisingly complicated on the backend, but we got it done. Unfortunately, the user experience kinda sucked, so we ended up ripping it all out...
edit: I think I’ve misunderstood the point of the article. He is saying passkeys are dangerous for people without password managers, therefore for most people passwords are still better (since most people don’t use password managers). It’s not so much a problem with passkeys, but the lack of password managers.
Even in the best case scenario, where you’re using an iPhone and a Mac that are synced with Keychain Access via iCloud
Surely the better-case scenario would be using a password manager?
The article doesn’t address the recommended use-case of passkeys + password manager, which makes it kind of irrelevant.
edit: I think I’ve misunderstood the point of the article. In a non-obvious (to me at least) way, he is saying passkeys are dangerous for people without password managers, therefore for most people passwords are still better.
I’d be interested in a discussion of his points here :) those sound like valid points he’s making
edit: I think I’ve misunderstood the point of the article. He is saying passkeys are dangerous for people without password managers, therefore for most people passwords are still better (since most people don’t use password managers). It’s not so much a problem with passkeys, but the lack of password managers.
Surely the better-case scenario would be using a password manager?
The article doesn’t address the recommended use-case of passkeys + password manager, which makes it kind of irrelevant.
But that is exactly what he recommends, using a password manager - with one time email authentication for the first login as an extra step, right?
edit: I think I’ve misunderstood the point of the article. In a non-obvious (to me at least) way, he is saying passkeys are dangerous for people without password managers, therefore for most people passwords are still better.