This. In theory, passkeys should be great. Sort of an SSH-for-the-masses.
Unfortunately, the industry has mangled the implementation, making them basically useless.
Unfortunately, the industry has mangled the implementation, making them basically useless.
When they do work smoothly they aren’t useless though.
Anything Apple related is another story...
There's some good movement in the linux desktop space I'm excited about: https://github.com/linux-credentials/linux-webauthn-platform...
On iOS I can even see a list of password & passkey providers, so I can ensure that the Apple one is toggled off (as well as MS Authenticator which can also provide those it seems)
Google Android may be good, but Chrome is not doing right yet. Chrome still tries to get you to use itself i stead of delegating to the platform selection box.