Passkeys: A shattered dream (fy.blackhats.net.au)

Article summary

The author, a developer of the Webauthn library for Rust, expresses disappointment and frustration with the current state of Passkeys, a technology intended to replace passwords. They cite issues with Apple's Keychain deleting Passkeys, problems with the user experience, and concerns about vendor lock-in. The author believes that Passkeys have failed to deliver on their promise and may not be suitable for widespread adoption. The article also touches on the complexities of the Passkeys ecosystem and the challenges of implementing it.

Main themes

• Passkeys
• Webauthn
• Passwordless authentication
• Vendor lock-in
• User experience
• Security

What commenters say

• The Passkeys ecosystem is overly complex and prone to errors, making it difficult for users to manage their credentials.
• Some users have not experienced the same issues with Passkeys as the author, suggesting that the problems may be isolated or user-specific.
• The design of Passkeys prioritizes security over user convenience, which may limit its adoption and effectiveness.
• The reliance on hardware devices for Passkeys is a limitation, and a software-based approach could provide a better user experience.
• The export and transfer of Passkeys is a significant issue, with some password managers not supporting it, and users are looking for solutions to this problem.
• The comparison between Passkeys and traditional password management systems is not straightforward, and Passkeys may not offer significant advantages for all users.
• The discussion around Passkeys is also influenced by broader concerns about security, crime, and healthcare in the US, which may impact the perception of the technology.
• Despite the challenges, some users and developers remain hopeful that Passkeys can still provide a secure and convenient alternative to traditional authentication methods.