logoalt Hacker News

bryantwolfyesterday at 9:02 AM1 replyview on HN

The advantage is that the password never leave the device. It has a public key and signs challenges with the private key but nothing sensitive goes over the wire on every login


Replies

valenterryyesterday at 9:10 AM

It should be noted that that is not an inherential advantage of passkeys over passwords. It is possible to achieve the same with passwords, e.g. by using a hash-cascade.

show 2 replies