273
Passwords have problems, but passkeys have more (world.hey.com)
submitted 2 years ago by to c/technology@lemmy.world
181 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 28 points 2 years ago (4 children)

There was a related news recently, that bitwarden and other pw managers will be able to sync passkeys between devices. Won't that solve these issues?

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [–] 32 points 2 years ago (2 children)

    My thoughts exactly. I use Bitwarden and passkeys sync flawlessly between my devices. Password managers tied to a a device or ecosystem are stupid and people shouldn’t use them. This is true whether you use passwords or passkeys.

    That said, we cannot blame users for bad UX that some platforms and some devs provide.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 2 years ago (2 children)

    Isn't your password manager tied to an ecosystem with Bitwarden ?

    I'm surprised people trust third parties to hold their passwords.

    Wasn't there multiple password managers that got powned over the years ?

    If you can sync Passwords you are also more exposed than some unhandy secure local password storage.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 2 years ago

    I can use bitwarden on Windows, Linux, Mac, iOS, Android, on desktop app or using CLI. That’s a stark difference in comparison with built in Microsoft or Apple keychains. And yes, I trust Bitwarden.

  • permalink
  • fedilink
  • source
  • parent
  • [–] -3 points 2 years ago (3 children)

    Bitwarden is not usable on Linux desktop, keeps asking for password. The password can't be too short, so it takes some time to type it in. I turn off my computer when it's not needed, so I would just need to type in the password when I turn it on again.

    Anyone have a better solution?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 9 points 2 years ago (1 child)

    You could use your

    to unlock the app instead of the password

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 14 points 2 years ago*

    Not in all situations. And in a way a user will not be aware of. The service or website can define what type of passkey is allowed (based in attestation). You may not be able to acutally use your "movable" keys because someone else decided so. You will not notice this until you actually face such a service. And when that happens, you can be sure that the average user will not understand what ia going on. Not all passkeys are equal, but that fact is hidden from the user.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 2 years ago (3 children)

    It does*.

    However when I'm trying to login with a passkey in my mobile browser, Bitwarden prompt isn't showing up. I don't know what's wrong.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 3 points 2 years ago (1 child)

    If you're using Android it's more than likely just an OS issue. I have had a lot of issues on my phone trying to use passkeys let alone just the password manager.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago

    One of many reasons I hate android. In my experience the integration with technology: late and poorly polished, early and kneecapped, initially available then removed, or non-existent.

    I think its partly the fragmentation in the Android community and mostly Google's influence.

  • permalink
  • fedilink
  • source
  • parent