I like passkeys*
-
@whitequark I'll be honest that I don't. I've set them up for a few accounts, and universally regret it.
The reliability of logging in with them seems to be abysmal. The implementations on some major websites seem very sketchy, and then my PW manager and my browser sometimes fight over who should be prompting me to use a passkey. I would estimate that ~50% of the time I try to use them it fails, and then I get buggily transferred into some kind of backup login flow.
@whitequark I share your desire for availability, but I've mostly achieved that by using 2fac authentication code generator apps, which I have set up on redundant devices.
-
@whitequark I'll be honest that I don't. I've set them up for a few accounts, and universally regret it.
The reliability of logging in with them seems to be abysmal. The implementations on some major websites seem very sketchy, and then my PW manager and my browser sometimes fight over who should be prompting me to use a passkey. I would estimate that ~50% of the time I try to use them it fails, and then I get buggily transferred into some kind of backup login flow.
@resistor huh, I have a very different experience. what are some major failure points for you? (specific websites)
-
@whitequark I share your desire for availability, but I've mostly achieved that by using 2fac authentication code generator apps, which I have set up on redundant devices.
@resistor I also set that up in a similar way; mainly I just hate entering the codes because I have been traumatized by SMS 2FA, and passkeys just... lack that step
-
@resistor huh, I have a very different experience. what are some major failure points for you? (specific websites)
@whitequark Amazon is the worst offender with a literally 0% success rate. Google and PayPal both give me trouble regularly as well. To its credit, the GitHub passkey seems to work reliably.
-
@whitequark Amazon is the worst offender with a literally 0% success rate. Google and PayPal both give me trouble regularly as well. To its credit, the GitHub passkey seems to work reliably.
@resistor @whitequark Interesting, my experience is totally different too. I don't think I've ever had them fail. Likely because I'm only using Safari with the Passwords app.
-
@whitequark Amazon is the worst offender with a literally 0% success rate. Google and PayPal both give me trouble regularly as well. To its credit, the GitHub passkey seems to work reliably.
@resistor hah I never even managed to set 'em up with Amazon
-
all of my passkeys* live in a KeePassXC database and I am both safe from phishing and from the services becoming unavailable because I lost a hardware token, which is why I like them
-
@resistor @whitequark Interesting, my experience is totally different too. I don't think I've ever had them fail. Likely because I'm only using Safari with the Passwords app.
@jdevlieghere @whitequark I'm using Safari with 1Password. 🤷♂️
-
@magnetic_tape I agree with this in principle but personally since the effort to register/replace one hardware token is already too high, two is worse, not better
@whitequark
I mean having two in the first place and register them on a service is not much longer than registering just one.Regarding usage either one is accepted by the service so it wouldn't be any harder.
-
@whitequark
I mean having two in the first place and register them on a service is not much longer than registering just one.Regarding usage either one is accepted by the service so it wouldn't be any harder.
- I find using hardware tokens onerous in general (it is difficult for me to stand up and walk around the house)
- if I lose a token I must re-register a new one everywhere, which is a huge cognitive tax on top of that
-
undefined oblomov@sociale.network shared this topic on