314
Passkeys may require some more research. (lemmy.zip)
submitted 4 weeks ago by to c/linux@lemmy.ml
122 comments fedilink hide all child comments
 

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 4 weeks ago* (1 child)

But they already do enforce a "security level" for passwords through minimum character counts (e.g. must be at least 8 characters long), specific character requirements (e.g. at least one upper case + lower case + number), rotation schedules (e.g. must be changed every 90 days), etc. Some even enforce password sharing (e.g. Netflix IP/geolocation checks).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 4 weeks ago*

    Yeah and certain password requirements are also dumb. But at least they still give me a degree of freedom how to generate the password and how I store the password.

    Second factor is sometimes worse than Passkeys; with vendor specific apps (Steam Guard, Blizzard Authenticator, Microsoft Authenticator, etc) instead of following standard TOTP. But still. I want agency over my credentials.

  • permalink
  • fedilink
  • source
  • parent