Embed Notice

@dalias @whitequark @glyph @mcc

> They absolutely are not. There is no such thing by default, only if all your devices are from a single platform authority (Apple, Google, or Microsoft) and you trust them. Most people do not fit it that category.

Okay, you *are* widely out of touch. Chrome alone has about 68% market share and has a built-in E2E password manager that works on Linux/macOS/Windows/Android + syncs with the Android keystore for use outside of the browser. I wouldn't call that "single platform authority" but either way, *a lot* of users use this. We may not like it but that's how it *is*.

> Even on Apple's walled garden ecosystem it's hard af to get this magical transfer to new device to work.

*if* you are in Apple's walled garden it's just in iCloud and transparently on all your devices.

> Only critical passwords like your email actually have to be written down. Everything else you just do a reset via email.

That's one solution. Which, you know, will work with passkeys too, so you've just invalidated your whole fucking point.

(Besides: I'd love to rip out email from this too in the future because it undermines the whole security but that's outside of the scope of this discussion.)