We had originally planned to go all-in on passkeys for ONCE/Campfire, and we built the early authentication system entirely around that. It was not a simple setup! Handling passkeys properly is surprisingly complicated on the backend, but we got it done. Unfortunately, the user experience kinda sucked, so we ended up ripping it all out...
  • asap@lemmy.worldEnglish
    0·
    1 month ago

    Even in the best case scenario, where you’re using an iPhone and a Mac that are synced with Keychain Access via iCloud

    Surely the better-case scenario would be using a password manager?

    The article doesn’t address the recommended use-case of passkeys + password manager, which makes it kind of irrelevant.

    • sir_pronoun@lemmy.worldEnglish
      0·
      1 month ago

      But that is exactly what he recommends, using a password manager - with one time email authentication for the first login as an extra step, right?

      • asap@lemmy.worldEnglish
        0·
        1 month ago

        edit: I think I’ve misunderstood the point of the article. In a non-obvious (to me at least) way, he is saying passkeys are dangerous for people without password managers, therefore for most people passwords are still better.