Hacker News Reader

Comment by Apocryphon | Hacker News Reader

As a long-time Safari user who uses keychain heavily in lieu of 1Password or other managers, I probably will migrate to using Passkey because it sounds pretty seamless.

But the lock-in point seems like a founded critique. Does anyone disagree with this claim?

View on HN

I'm not sure this is any more locked in then the parent post is locked into 1password. Moving auth tools is a pain.

Anyone implementing FIDO should allow you to enrol multiple devices. As long as the auth consumers allow multiple keys, there's no lock-in. You just need to setup your new device before ditching apple.

Moving auth tools is actually quite simple. I migrated from lastpass to 1password a few years ago and it was very straightforward.

1Password et al offer many export options including very simple csv

Looking at how various places do 2FA, it's likely that at least some websites will not support multiple keys even if they ought to.

Also, I imagine that many people do not have the luxury of multiple devices. So if you lose your phone, you'll need to buy or at least borrow another iOS device to recover it from iCloud before you could switch to Android.

How common would it be for someone who has just lost their phone to want to immediately switch platforms? Isn't it much more likely that they'd want a new device on the same platform as the one they just lost?

If they were already planning to switch platforms, the loss or destruction of their old device provides a natural moment to make the switch, where buying a new device feels like it's locking yourself in for another couple of years.

Supply chain issues, sanctions, travel or prices you can‘t afford at the moment your phone breaks down may make you switch the platform involuntarily.

I think they must know they need to have some sort of migration/export strategy. Maybe its just to early for that to be implemented yet. I mean I'm not even aware of any websites that support Passkeys as the sole auth method.

How are these handled in Chrome/FF/Windows/etc.

Reply on news.ycombinator.com