Comment

Comment by happyopossum

Almost every complaint I see about passkeys seems to be based on behavior and configurations I just do not see in the real world.

“Once I set up a passkey I can’t log in from another device” - have never seen this to be the case. Existing password / OTP codes have always worked as a fallback if syncing somehow breaks.

“I don’t want to trust Apple/MS/Google with my logins” - so don’t. Use bitwarden or 1Password or lastpass or whatever you want to store your passkeys.

“If I lose my phone I’m screwed” - see #1 and enable sync maybe?

Boils down to I believe a lot of folks looked at passkey implementation at a high level, saw some potential pitfalls, and never actually used them to discover those pitfalls have all been accounted for.

Go ahead and skip passkeys if you want, but stop preaching about evils that don’t exist.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton