this post was submitted on 11 Nov 2025
279 points (87.4% liked)

Technology

76765 readers
2300 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

Passkeys are built on the FIDO2 standard (CTAP2 + WebAuthn standards). They remove the shared secret, stop phishing at the source, and make credential-stuffing useless.

But adoption is still low, and interoperability between Apple, Google, and Microsoft isn’t seamless.

I broke down how passkeys work, their strengths, and what’s still missing

you are viewing a single comment's thread
view the rest of the comments
[–] artyom@piefed.social 2 points 1 day ago (1 children)

User inconvenience is not at all the same thing as security.

[–] Passerby6497@lemmy.world 2 points 1 day ago* (last edited 9 hours ago) (1 children)

No, but the two tend to be correlated.

Example, MFA authentication is a security feature, but inconvenient as shit with low or no lifetime. Same complaints about short lived sessions on app sites. Especially when every login requires MFA....

[–] artyom@piefed.social 1 points 1 day ago

MFA can be a variety of different things. In the case of passkeys, a prompt comes up on the screen, you click it, and that's it. It's both secure and convenient. That's why it's great.