Y’all know how mint.com will sometimes ask you for your user name and password for other services/websites to log in on your behalf instead of doing a proper OAuth? What other popular websites do this?
If you recently joined Threads because of the Europe thing, I’ve (reluctantly) been trying to use it more, because I’ve missed some of my people. You can follow me here: https://www.threads.net/@rickymondello
If you can drop a single device in a lake and lose your credential, it’s not a passkey. Passkeys are backed up and synced across your devices to deliver a great and safe user experience, while also eliminating phishing.
I don’t know who needs to hear this, but passkeys are a *replacement* for passwords — a step up in usability and security over passwords synced in a password manager. Passkeys are not phone-based security keys, or some other easy-to-lose, device-bound credential.
‼️🔑 macOS Sonoma brings Apple’s password manager to Google Chrome, Microsoft Edge, and other browsers using their extensions stores with the “iCloud Passwords” browser extension.
You can AutoFill passwords and one-time codes, save new passwords, and right-click QR codes to set up code generators.
If you’re running the macOS Sonoma public or developer beta, you can try it right now!
Yes, you heard that right! iOS 17 and macOS Sonoma add support for sharing passwords and passkeys in groups with friends and family.
- share passkeys, passwords, verification codes, and notes - edits and updates seamlessly sync between group members - end-to-end encrypted - share with family, friends, and other close contacts - the password manager that’s built in to iPhone, iPad, and Mac is free to use and easy to switch to :)
I’ve written up a blog post with my personal thoughts on Twitter restricting SMS 2FA to Twitter Blue subscribers.
My post explains what 2FA is, why SMS 2FA is actually awesome, why Twitter did this, how Twitter can restore some security benefits to its users, and why passkeys will ultimately be the solution for account authentication. https://rmondello.com/2023/02/18/twitter-sms-2fa/
If you’re annoyed by those floaty prompts on websites to sign into them with your Google Account, you can turn them off for your Google account! Link: https://myaccount.google.com/u/0/permissions