Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

“Passkeys, developed by the FIDO Alliance, with support from major tech companies like Apple, Google, and Microsoft, offer a more secure and user-friendly alternative to traditional passwords“

is a lying, surreptitious statement.

Yes, “passkeys” are public-private key pairs, but no different in theory from, say, ssh public/private keys. Whoever is pushing passkeys today though, at this point, is just trying to improve your security (good) while simultaneously locking you into their stuff, Forever (Very Bad).

Passkeys are not “user-friendly” because they take control away from users, promote lock-in that prevents users from switching platforms, and remain something that could be improved… but the powers that be have no intention of doing so because their only goal is to fuck you.

Without an open storage protocol and transfer method, not involving any third party “letting” you do so or collaborating to force you to store cryptographic material in their place or format, this is just another attempt to control you and screw you over.

FAFO at your own risk.



Agreed, the companies got greedy and only opened up support outside their platforms after community complained it was DOA. They fully intended to lock everyone in from the get go. But at least now bitwarden can handle the passkeys so no lock in. https://bitwarden.com/passwordless-passkeys/




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: