Looks like a huge amount of security vendors are working to have a secure and open standard for passkey portability between platforms.

It is always good to see major collaboration in the security space like this considering the harsh opinions that users of some of these vendors have toward many of the others. I just wish apps and sites would stop making me login with username and password if passkeys are meant to replace that lol.

You are viewing a single thread.
View all comments View context
15 points

If they’re not portable how would I for example login to an account while on my Desktop, if I set up the passkey on my Phone?

permalink
report
parent
reply
2 points

There are already systems in place that allow temporary passkey sharing, for example with a QR code (CaBLE) https://www.corbado.com/blog/webauthn-passkey-qr-code

permalink
report
parent
reply
8 points

Doesn’t that imply you still have to open up your phone to temporarily share to your pc whenever you need it?

permalink
report
parent
reply
3 points

Yes but when you are logged in, you can add the passkey that belongs to the new device to your account

permalink
report
parent
reply
1 point

That doesn’t transfer the private key though (or at least it shouldn’t).

I’m pretty sure it’s just transferring public keys and signing the response with the private key on your phone.

permalink
report
parent
reply
11 points

You generate a second one on the other device.

permalink
report
parent
reply
14 points

Assuming that all services you log into support multiple passkeys. My auto financing company doesn’t, for example

permalink
report
parent
reply
1 point

Well, then it seems like they have not understand the idea behind passkeys, like so many…

permalink
report
parent
reply

Privacy

!privacy@lemmy.ml

Create post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

Community stats

  • 4.7K

    Monthly active users

  • 1.6K

    Posts

  • 23K

    Comments