Hacker News Reader

Comment by Barbing | Hacker News Reader

> no one can attest with certainty that I won’t wake up in a painful situation because I decided to adopt passkeys

Seems that way. Better luck next year, passkey standards(?) people. Hope it’ll be ironed out at some point.

I think the repeated posts and articles constantly rehashing this topic is telling. Every thread is nearly the same in terms of some people saying “here are the reasons why passkeys don’t work for me” and other people saying “you’re holding it wrong”. I don’t think many people come away with their views changed.

It breaks the traditional login paradigm. I had a hard time trying to setup a single device as my passkey manager. Now I realize that you should make one on all your devices. My bank website, I have my password and two separate passkeys. Individual sites may have an implementation issue, but in that case I use the more troublesome password workflow. I still come across password implementation issues on some sites.

Interesting. I still want to be able to login if all my devices are stolen/destroyed. Guessing people will be in pickles after natural disasters.

Good tip!

The thing the people are also sometimes missing is that I leave my YubiKey at home... especially in those situatiosn where I am prone to lose it.

Going to a concert - I'll take my phone but not my YubiKey, etc.pp

And if I enroll 2 YubiKeys, I can deposit one safely at home. I want my phone to be less important, not more important.

I still can use my password. I use the passkeys for the convenience and extra security. If I lost all my devices I would just login with my password and add a new passkey. I would also remove any for devices that I don't control or are damaged. I suspect even if the site were passkey only, they would have some account recovery workflow.

Reply on news.ycombinator.com