Hacker News Reader

So you want passkey-level security, but are okay to let a 3rd party manage your passwords?

Third parties manage nearly all my money, my future wealth, the quality of the water I drink, etc.

Yes you need to put thought into who you trust to provide password management but for most people having a professional third party help them improve how they use passwords will be a benefit to security overall.

You have the option of TOTP that gives you 100% of the control, privacy, and portability. Yet, for minor inconvenience, you are ready to sacrifice all of this. Why?

TOTP does not replace passwords, and frankly I’m sort of confused why you think they do. Doing passwords right across a multitude of websites is more than a minor inconvenience unless I am willing to simply give up on security.

And I am not.

> So you want passkey-level security, but are okay to let a 3rd party manage your passwords?

You can self host an open-source solution if you do not trust 3rd parties. I put high value on convenience. TOTP solutions are not as convenient.

Reply on news.ycombinator.com