posted in Technology
I don't like passkeys | Ethan Hawksley
hawksley.dev/blog/i-dont-like-passkeysReplying to @lemmydividebyzero@reddthat.com
Good article.
Currently passkeys are too much of a vendor lock-in to big tech.
Bitwarden support alone does not change that.
Replying to @ouch@lemmy.world
Microsoft 365 implementation of passkeys is sacrilegious somehow.
It requires only the Authenticator app from Microsoft and can use nothing else to create the passkey. The way this is implemented on iOS means that Authenticator comes up as an autofill option BUT IT ONLY SUPPORTS M365 and is useless for anything else. Leave it to Microsoft to take an open standard and bastardize it to the point of it being MORE CONVENIENT to just type a damn password.
Replying to @Clusterfck@lemmy.sdf.org
Wait, you type passwords? KeePassXC’s auto-type awaits!
Replying to @Flagstaff@programming.dev
You realize password managers just open up another attack vector right?
Replying to @ILikeBoobies@lemmy.ca
Gather round everyone, “ILikeBoobies” is giving tech security advice! 👂
Replying to @Clusterfck@lemmy.sdf.org
The authenticator requirement was for regular MFA, with passkey you can use others like yubikey. BUT your admin can lock it to certain vendors so they could have selected Microsoft only.
Replying to @tehBishop@sh.itjust.works
I’m the admin. Every time I try to open it up, I only get guides for doing it on a regular, personal MS account.