this post was submitted on 12 Oct 2026
30 points (75.9% liked)

Privacy

5403 readers
194 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 3 years ago
MODERATORS
Ategon@programming.dev
danielintempesta@programming.dev
30
Passkeys are a trap. Do not use them (nonfunctional.substack.com)
submitted 2 weeks ago by cm0002@toast.ooo to c/privacy@programming.dev
9 comments fedilink hide all child comments
 

Comments

you are viewing a single comment's thread
view the rest of the comments
[–] csolisr@hub.azkware.net 1 points 2 weeks ago

I personally use a self-hosted passkey manager, and I don't see the point of boycotting WebAuthn. Making my account less secure by relying on TOTP exclusively seems like a dangerous trade-off. And whatever amount of user adoption is irrelevant if the Big Web decides to make attested passkeys mandatory.