logoalt Hacker News

shaky-carrouselyesterday at 8:57 AM4 repliesview on HN

I truly don't see the advantage of passkeys over a password manager like bitwarden, with random passwords.


Replies

pibakeryesterday at 9:04 AM

The main benefit is you will never put your passkey on a phishing site. Password managers provide some protections against it because if they do not work automatically on a website you know something is fishy, but sadly many websites have botched their password input so even with a password manager you may still need to manually copy and paste (or even type, if pasting is disabled) the password.

The problem is whether or not the benefit outweighs the additional risks introduced — losing account access when you lose a device, furthering device lock down, difficulty transferring the passkey between devices, UX degradation due to bad implementation. In my opinion the answer is no and I am sticking with my passwords.

show 1 reply
bryantwolfyesterday at 9:02 AM

The advantage is that the password never leave the device. It has a public key and signs challenges with the private key but nothing sensitive goes over the wire on every login

show 1 reply
red_admiralyesterday at 10:30 AM

They're more accessible to people who don't understand computer security?

UltraSaneyesterday at 8:12 PM

The main advantage is how strictly limited export of the passkey secret is. It is very unlikely for it to ever be phished or copied.