277
Google will now make passkeys the default for personal accounts (arstechnica.com)
submitted 2 years ago by to c/technology@lemmy.world
175 comments fedilink hide all child comments
 

Passkey is some sort of specific unique key to a device allowing to use a pin on a device instead of the password. But which won't work on another device.

Now I don't know if that key can be stolen or not, or if it's really more secure or not, as people have really unsecure pins.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 years ago* (last edited 2 years ago)

Lol. I guess you learned a word from the CEH you flunked.

Edit: but yes, passkeys greatly reduce the attack surface compared to a password.

And when using a properly hardened device like a yubikey, you can actually minimize your attack surface to as low as it's ever going to be in a web context.

  • permalink
  • fedilink
  • source
  • parent