Replying to @⁨lemmydividebyzero@reddthat.com⁩

I feel like there’s some potential in password-derived passkeys, which would get around the storage and hardware lock-in issues. It’d essentially be a master password like for BitWarden, but instead of needing an app to store a bunch of generated passwords, the master password could be all you need to authenticate.

Most of the sources of compromise for regular users would be eliminated because the password never leaves the client.

Replying to @⁨merde@sh.itjust.works⁩

Well, she also had terrible dementia for years, so the only passwords she was going to remember was the Little Orphan Annie secret code of “Drink More Ovaltine.”

My MIL is a grandma, and I would give her a 75% chance of reading her passwords to “someone from the bank” if they caught her at the right time. Maybe she’s already done that, I’m not sure if she did that or almost did that once.

en