290
Passkeys Explained: The End of Passwords (sentientrant.com)
submitted 1 year ago by to c/technology@lemmy.world
204 comments fedilink hide all child comments
 

Passkeys are built on the FIDO2 standard (CTAP2 + WebAuthn standards). They remove the shared secret, stop phishing at the source, and make credential-stuffing useless.

But adoption is still low, and interoperability between Apple, Google, and Microsoft isn’t seamless.

I broke down how passkeys work, their strengths, and what’s still missing

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 year ago

Companies should already be storing password hashes, so the risk of leaking a hash vs a public key is roughly the same. It's just that private keys are generally longer than passwords and therefore harder to bruitforce.

Any company storing passwords in a recoverable format deserves to be hacked.

  • permalink
  • fedilink
  • source
  • parent