A post called Passkeys are a trap. Do not use them. has been doing the rounds over the last few days, making it pretty high on Hacker News, and I've had it sent to me many times with an 'is this true?' kind of vibe. It's written for
  • UnfortunateShort@lemmy.worldEnglish
    2·
    1 hour ago

    Why should passkeys be bad? Because Google (among others) pushed them? They are supported by Yubikey, Bitwarden, Proton Pass… the list goes on.

    It’s a straightforward improvement compared to transmitting hashed passwords, that’s all there is to it.