Technology

59149 readers

2423 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

503

Big Tech passkey implementations are a trap | Proton (proton.me)

submitted 7 months ago by AnActOfCreation@programming.dev to c/technology@lemmy.world

220 comments fedilink hide all child comments

Big Tech has implemented passkeys in a way that locks users into their platforms rather than providing universal security
Passkeys were developed to replace passwords for better account security, but their rollout by Apple and Google has limited their potential
Proton Pass offers passkeys that are universal, easy to use, and available to everyone for improved online security and privacy.

you are viewing a single comment's thread
view the rest of the comments

[–] SkaveRat@discuss.tchncs.de 35 points 7 months ago* (last edited 7 months ago) (2 children)

I'm well versed in IT security, and even with (or because of) my knowledge, I still haven't looked deep into setting up passkeys on my services. Just because it's such a clusterfuck of weird implementations.

I can't imagine being a normal consumer and wanting to set them up. The poor support teams having to support this...

And I'm managing at least one service at work that could totally benefit from passkey integration. The headache of looking into how to properly implement them is just way too much

[–] deranger@lemmy.world 3 points 7 months ago (1 children)

I can't imagine being a normal consumer and wanting to set them up.

It’s quite simple on iOS. IIRC, when logging into the paypal website you get a prompt asking if you’d like to use passkeys. Accept that, then you get a keychain prompt asking if you’d like to make/use a passkey. Click continue and pass FaceID authentication, then you’re in with a passkey. For future logins you click the login with passkey and it faceIDs you in. It’s easy.

[–] randomaccount43543@lemmy.world 37 points 7 months ago (1 children)

Then you are totally locked in with Apple devices and cannot switch to Android and take your passkeys with you

[–] deranger@lemmy.world 6 points 7 months ago* (last edited 7 months ago)

I’m not saying it’s good, I’m saying it’s easy. It is not hard for normal consumers to setup.

[–] MigratingtoLemmy@lemmy.world 3 points 7 months ago

What does secrets management look like at work?