Embed Notice

@TetroniMike I’m of multiple minds about Passkeys – particularly if you’re running multiple password managers,

but ultimately I consider them a Good Thing on the basis of “the people who strongly hate them tend to be bad people” and “the proponents of them tend to be good people like @rmondello "

I’ve come to think of them as I do SSH keys, which are the software equivalent of near-field passcards for doors

they’re just another factor that augments TOTP codes or passwords or SMS codes or whatever; but fundamentally unphishable,

and when a login provider doesn’t let you register multiple passkeys push back on that, because unlike TOTP there are perfectly valid reasons to have multiple passkeys