QhwyF3AxE
Joined 3 years ago
Karma
2
Submissions
4
Member since
May 19
Recent submissions
Comment · 3 years ago
passkeys is a common noun (like the word “password”) and therefore should always be lowercase unless it’s the first word in the sentence.
Comment · 3 years ago
This is a great point. And to respond to the other part of the parent comment about storing "all their credentials with one of the large tech companies" — you don’t even need to do that, if you don’t want to.
Apple just extended their Credential Provider API such that passkeys can now be synced using external providers, meaning password manager apps can save and offer passkeys on iOS, iPadOS, and macOS. So you can choose to sync your passkeys with whatever your favorite password manager is.
See this page: https://developer.apple.com/passkeys/
And Google announced a similar API a month or two ago.
See the section titled "Passkey support for Android apps" on this page: https://developers.google.com/identity/passkeys/supported-en...
Comment · 3 years ago
> I can't print out my passkeys and store them in a safe, nor does there appear to be any system for allowing someone access to my passkeys.
Recovery is handled differently depending on who you are using to sync your passkeys. Apple has a great recovery story. iCloud Keychain supports both a "recovery key" and "recovery contacts".
See the section titled "Recovery security" in the "About the security of passkeys" doc: https://support.apple.com/en-us/HT213305
Additional relevant docs:
Recovery contact: https://support.apple.com/en-us/HT212513
Recovery key: https://support.apple.com/en-us/HT208072
Comment · 3 years ago
Where did you get the idea that Apple and Google's implementations are hardware-bound?