Comment

Comment by torstenvl

> Lockout is a real risk, but there is nothing insecure about passkeys.

secure - adjective

se· cure si-ˈkyu̇r -ˈkyər

securer; securest

1

a: free from danger

b: affording safety (a secure hideaway)

c: TRUSTWORTHY, DEPENDABLE (a secure foundation)

d: free from risk of loss

Passkeys as a sole/required method of authentication increase the risk of permanent loss. In any other configuration they do not mitigate phishing risk.

It is not possible to say there is nothing insecure about them.

parent torstenvl 1 month ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton