A screenshot of a message prompt I got when trying to set up a passkey with one of my online accounts. It doesn't give me the private key to save into the app of my choice, it demands that I use the mobile app on a Google or Apple device to set up and use the passkey.

Notices where this attachment appears

1. Embed this notice
   Marcus Adams (gerowen@mastodon.social)'s status on Wednesday, 29-Jan-2025 02:09:24 JST Marcus Adams

   I haven't adopted #PassKeys for my accounts because, as far as I can tell, there aren't really any options that let me own my private key and store it myself; they all depend on trusting somebody like Google, Meta or Apple to handle it for you, which completely defeats the purpose in my opinion. Like #PGP / #GPG, I want to own the private key so I can manage it myself. Trusting your PassKey to a third party app that's only on your phone introduces a single point of failure.

   #Security #Privacy