77
Big Tech passkey implementations are a trap
(proton.me)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 08 Apr 2024
77 points (96.4% liked)
Proton
5253 readers
40 users here now
Empowering you to choose a better internet where privacy is the default. Protect yourself online with Proton Mail, Proton VPN, Proton Calendar, Proton Drive. Proton Pass and SimpleLogin.
Proton Mail is the world's largest secure email provider. Swiss, end-to-end encrypted, private, and free.
Proton VPN is the world’s only open-source, publicly audited, unlimited and free VPN. Swiss-based, no-ads, and no-logs.
Proton Calendar is the world's first end-to-end encrypted calendar that allows you to keep your life private.
Proton Drive is a free end-to-end encrypted cloud storage that allows you to securely backup and share your files. It's open source, publicly audited, and Swiss-based.
Proton Pass Proton Pass is a free and open-source password manager which brings a higher level of security with rigorous end-to-end encryption of all data (including usernames, URLs, notes, and more) and email alias support.
SimpleLogin lets you send and receive emails anonymously via easily-generated unique email aliases.
founded 1 year ago
MODERATORS
Not only passkey managers but websites too. I tried to set up a passkey for PayPal but they don't let you set it up unless you're using chrome or safari
I think this might be on Firefox, not PayPal. But I don't know enough about the situation to be sure.
Proton linked to this Firefox bug report in their article about how to set up passkey in Pass
https://bugzilla.mozilla.org/show_bug.cgi?id=1862132
This seems to be about android, meant just desktop, where I use Firefox and bitwarden. It works fine with GitHub where I created and use a passkey but PayPal's faq says they only support chrome and safari.
This is one of the major problems with passkeys that passwords don't have. Are they device-specific, browser-specific, browser-on-device specific? Can I use the same one or do I need a different one if I'm on chrome but two different desktops, or desktop and laptop or if I use both Firefox and Chrome on the same phone/laptop? Until this stuff gets worked out, passkey aren't going to go mainstream.
In theory, as the article mentions, you should be able to save them to your password manager of choice (if it supports passkeys, bitwarden does on the browser extension but not in the android app yet) and they will sync up through the cloud. So you might have just one passkey for GitHub for example and use that same one on all your devices to log into GitHub.
Yes, I noticed that as well. And Google account as well, would not let me register a passkey from Firefox.
Might be because Firefox support for passkeys is fairly recent.
I had no problem with FIDO2 security key and other Webauth method so far.
On brave it worked fine
Brave, a.k.a Chrome with a lion logo...