https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shattered-dream/
Passkeys: A Shattered Dream
Passkeys: A Shattered Dream
The helplessness of users on these threads is obvious - and these are technical early adopters. The users we need to be advocates for changing from passwords to passkeys. If these users can't make it work how will people from other disciplines fare?
Externally there are other issues. Apple Keychain has personally wiped out all my Passkeys on three separate occasions. There are external reports we have recieved of other users who's Keychain Passkeys have been wiped just like mine.
Now as users we have the expectation that keys won't be created or they will have disappeared when we need them most.
And I'm starting to agree - a password manager gives a better experience than passkeys.
That's right. I'm here saying passwords are a better experience than passkeys. Do you know how much it pains me to write this sentence? (and yes, that means MFA with TOTP is still important for passwords that require memorisation outside of a password manager).
So do yourself a favour. Get something like bitwarden or if you like self hosting get vaultwarden. Let it generate your passwords and manage them. If you really want passkeys, put them in a password manager you control. But don't use a platform controlled passkey store, and be very careful with security keys.
And if you do want to use a security key, just use it to unlock your password manager and your email.