you are viewing a single comment's thread
view the rest of the comments
[–] 46 points 8 months ago (6 children)

Password managers can hold Passkeys now and they’re portable. Bitwarden stores all of mine, use them on any machine.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 13 points 8 months ago*

    Yeh, I have passkeys in bitwarden.
    I get it. Once they become ubiquitous, you click "login" your password manager prompts you to select account, and you are in.
    No password that can be leaked, incorrectly stored, brute forced.
    Corporations can pre-register company service passkeys for new users.
    It's like mTLS, except staged.

  • source
  • parent
  • [–] 9 points 8 months ago (2 children)

    While true, it still means you're locked into only being able to log in from a browser that has the password manager extension installed and logged in. Sometimes I want to log in from another machine, or another OS, or another browser, or even an incognito window that doesn't have access to my extensions.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 7 points 8 months ago

    You can do that without an extension. There's a bunch of different protocols that let you, for example, use your phone as the authenticator.
    You can log in with your phone on a computer you've never used before by scanning a QR code and credentials never leave your device.

  • source
  • parent