41
Passkeys are a trap. Do not use them. (nonfunctional.substack.com)
submitted 1 month ago by to c/cybersecurity@infosec.pub
19 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 1 month ago (5 children)

So, if Bitwarden, all good?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 13 points 1 month ago

    Well…for now? Bitwarden looking to enshittify lately. But yes right now Bitwarden passkeys work great across multiple devices desktop and mobile. Been using them for a number of years now.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 6 points 1 month ago (2 children)

    I use vaultwarden with the bitwarden clients on my devices. Works a treat. Make sure you know what you’re doing and have an effective backup strategy if you decide on this!

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 1 month ago (1 child)

    I'm pretty confident in my backups, but passwords are just too important for me to risk, especially since I've started using unique usernames and email addresses for accounts.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 4 points 1 month ago

    Great opsec! I also have a catch all domain for usernames and use bitwarden generated complex passwords. I have a local backup and two off-site backups that themselves have redundancy so I should be fine. I hope :)

  • permalink
  • fedilink
  • source
  • parent