news.volyx.in

Passkeys: The beginning of the end of the password (blog.google)

556 points by donohoe · 1214 days ago · 633 comments on HN

Article summary

Google has begun rolling out passkeys, a new way to sign in to apps and websites, as an alternative to passwords. Passkeys allow users to sign in with a fingerprint, face scan, or screen lock PIN, making them more secure than passwords. This move is part of a broader industry effort to support passkeys, with other companies like Apple and Microsoft also on board. The goal is to make signing in easier and safer for users.

Main themes

  • passwordless future
  • passkey security
  • biometric authentication
  • platform lock-in
  • decentralization
  • password management

What commenters say

  • Passkeys may lock users into a specific platform or vendor, making it difficult to switch to a new platform.
  • The use of biometrics, such as fingerprints and face scans, is not secure and should not be used for guarding sensitive information.
  • Passkeys are more secure than passwords because they are resistant to online attacks like phishing and are stored securely on the device.
  • The implementation of passkeys may not be decentralized, which could lead to concerns about data storage and security.
  • Password managers are a more secure and user-friendly solution than passkeys.
  • The use of passkeys does not eliminate the need for passwords, but rather uses them in a more secure way.
  • The security of passkeys relies on the security of the device itself, which can be vulnerable to attacks.
  • Passkeys are not a replacement for proper 2-factor authentication and may be less secure than a password plus password manager combination.