#passkeys — Public Fediverse posts

«Phishing durch KI setzt Nutzer zunehmend unter Druck:
Moderne Phishing Angriffe werden durch künstliche Intelligenz immer schwerer erkennbar. Unternehmen und Plattformen reagieren mit neuen Sicherheitsfunktionen.»

Ach guck, die IT-Sicherheit und deren Gefahr durch kriminellen Einsatz der KI und deren Schutz davor, u.a .durch Passkeys, nun auch in den online Boulevard News.

📰 https://www.nau.ch/news/digital/phishing-durch-ki-setzt-nutzer-zunehmend-unter-druck-67127549

#aislop #itsicherheit #passkeys #itsec #online #boulevard #phishing #nauch #it

Weekly output: Google I/O teaser, satellite-to-phone services, passkeys, connected-home considerations, Matter

I’m spending a few days in cooler confines–Monday morning, I head to Vancouver for the second year of Web Summit’s conference there. And just like last year, I won’t have enough time to do much wandering around British Columbia’s largest city and taking in its stunningly beautiful mountains-and-sea scenery, because I have three panels to moderate over Tuesday and Wednesday (with the conference hosts paying for my hotel and reimbursing my airfare).

5/5/2026: Google Teases I/O Pregame Event. How to Watch ‘The Android Show’ on May 12, PCMag

This was one of the shortest posts I’ve written for PCMag, owing to the paucity of information in the brief teaser video Google published.

5/7/2026: FCC Chair: Starlink Isn’t Enough. We Need at Least 3 Satellite-to-Phone Services, PCMag

I spent Wednesday afternoon at the wireless trade group CTIA’s annual summit in Washington. Most of the talks on the program didn’t yield anything too newsworthy, but Federal Communications Commission chair Brendan Carr’s appearance met that bar even though he didn’t talk about his clumsy attempts to leverage the FCC’s broadcast licensing authority to punish TV shows and TV hosts for being mean to Republicans.

5/7/2026: Passkey-Adoption Report Finds Many Orgs Don’t Know How to Quit Passwords, PCMag

I had an advance copy of this FIDO Alliance survey but didn’t have time to write it up in advance; fortunately, Thursday did have enough idle time for me to get this post written and filed.

5/8/2026: Smart Homes In Practice: Bridging Design, Integration, And Market Promises With Real Human-Centered Living Outcomes, Smarter Infrastructure Summit

I had a brief trip to Chicago–well, its suburb Rosemont–for this small conference. I was a late addition to this panel, in which moderator Lisa An Wong quizzed me and architect Stephen Yas and connect-home integrator Corey Ardell about ways to get homes and the appliances in them thoughtfully wired.

5/9/2026: Matter Smart Home Standard Still Looks Immaterial At Retail, Smarter Infrastructure Summit

The title of this talk I did mirrors the story I did for PCMag almost three years ago; that post caught the attention of the conference organizers, and the chance to revisit the topic and get in some practice with doing a solo presentation led me to accept their travel-expenses-covered invitation.

Weekly output: Google I/O teaser, satellite-to-phone services, passkeys, connected-home considerations, Matter

I’m spending a few days in cooler confines–Monday morning, I head to Vancouver for the second year of Web Summit’s conference there. And just like last year, I won’t have enough time to do much wandering around British Columbia’s largest city and taking in its stunningly beautiful mountains-and-sea scenery, because I have three panels to moderate over Tuesday and Wednesday (with the conference hosts paying for my hotel and reimbursing my airfare).

5/5/2026: Google Teases I/O Pregame Event. How to Watch ‘The Android Show’ on May 12, PCMag

This was one of the shortest posts I’ve written for PCMag, owing to the paucity of information in the brief teaser video Google published.

5/7/2026: FCC Chair: Starlink Isn’t Enough. We Need at Least 3 Satellite-to-Phone Services, PCMag

I spent Wednesday afternoon at the wireless trade group CTIA’s annual summit in Washington. Most of the talks on the program didn’t yield anything too newsworthy, but Federal Communications Commission chair Brendan Carr’s appearance met that bar even though he didn’t talk about his clumsy attempts to leverage the FCC’s broadcast licensing authority to punish TV shows and TV hosts for being mean to Republicans.

5/7/2026: Passkey-Adoption Report Finds Many Orgs Don’t Know How to Quit Passwords, PCMag

I had an advance copy of this FIDO Alliance survey but didn’t have time to write it up in advance; fortunately, Thursday did have enough idle time for me to get this post written and filed.

5/8/2026: Smart Homes In Practice: Bridging Design, Integration, And Market Promises With Real Human-Centered Living Outcomes, Smarter Infrastructure Summit

I had a brief trip to Chicago–well, its suburb Rosemont–for this small conference. I was a late addition to this panel, in which moderator Lisa An Wong quizzed me and architect Stephen Yas and connect-home integrator Corey Ardell about ways to get homes and the appliances in them thoughtfully wired.

5/9/2026: Matter Smart Home Standard Still Looks Immaterial At Retail, Smarter Infrastructure Summit

The title of this talk I did mirrors the story I did for PCMag almost three years ago; that post caught the attention of the conference organizers, and the chance to revisit the topic and get in some practice with doing a solo presentation led me to accept their travel-expenses-covered invitation.

Weekly output: Google I/O teaser, satellite-to-phone services, passkeys, connected-home considerations, Matter

I’m spending a few days in cooler confines–Monday morning, I head to Vancouver for the second year of Web Summit’s conference there. And just like last year, I won’t have enough time to do much wandering around British Columbia’s largest city and taking in its stunningly beautiful mountains-and-sea scenery, because I have three panels to moderate over Tuesday and Wednesday (with the conference hosts paying for my hotel and reimbursing my airfare).

5/5/2026: Google Teases I/O Pregame Event. How to Watch ‘The Android Show’ on May 12, PCMag

This was one of the shortest posts I’ve written for PCMag, owing to the paucity of information in the brief teaser video Google published.

5/7/2026: FCC Chair: Starlink Isn’t Enough. We Need at Least 3 Satellite-to-Phone Services, PCMag

I spent Wednesday afternoon at the wireless trade group CTIA’s annual summit in Washington. Most of the talks on the program didn’t yield anything too newsworthy, but Federal Communications Commission chair Brendan Carr’s appearance met that bar even though he didn’t talk about his clumsy attempts to leverage the FCC’s broadcast licensing authority to punish TV shows and TV hosts for being mean to Republicans.

5/7/2026: Passkey-Adoption Report Finds Many Orgs Don’t Know How to Quit Passwords, PCMag

I had an advance copy of this FIDO Alliance survey but didn’t have time to write it up in advance; fortunately, Thursday did have enough idle time for me to get this post written and filed.

5/8/2026: Smart Homes In Practice: Bridging Design, Integration, And Market Promises With Real Human-Centered Living Outcomes, Smarter Infrastructure Summit

I had a brief trip to Chicago–well, its suburb Rosemont–for this small conference. I was a late addition to this panel, in which moderator Lisa An Wong quizzed me and architect Stephen Yas and connect-home integrator Corey Ardell about ways to get homes and the appliances in them thoughtfully wired.

5/9/2026: Matter Smart Home Standard Still Looks Immaterial At Retail, Smarter Infrastructure Summit

The title of this talk I did mirrors the story I did for PCMag almost three years ago; that post caught the attention of the conference organizers, and the chance to revisit the topic and get in some practice with doing a solo presentation led me to accept their travel-expenses-covered invitation.

Weekly output: Google I/O teaser, satellite-to-phone services, passkeys, connected-home considerations, Matter

I’m spending a few days in cooler confines–Monday morning, I head to Vancouver for the second year of Web Summit’s conference there. And just like last year, I won’t have enough time to do much wandering around British Columbia’s largest city and taking in its stunningly beautiful mountains-and-sea scenery, because I have three panels to moderate over Tuesday and Wednesday (with the conference hosts paying for my hotel and reimbursing my airfare).

5/5/2026: Google Teases I/O Pregame Event. How to Watch ‘The Android Show’ on May 12, PCMag

This was one of the shortest posts I’ve written for PCMag, owing to the paucity of information in the brief teaser video Google published.

5/7/2026: FCC Chair: Starlink Isn’t Enough. We Need at Least 3 Satellite-to-Phone Services, PCMag

I spent Wednesday afternoon at the wireless trade group CTIA’s annual summit in Washington. Most of the talks on the program didn’t yield anything too newsworthy, but Federal Communications Commission chair Brendan Carr’s appearance met that bar even though he didn’t talk about his clumsy attempts to leverage the FCC’s broadcast licensing authority to punish TV shows and TV hosts for being mean to Republicans.

5/7/2026: Passkey-Adoption Report Finds Many Orgs Don’t Know How to Quit Passwords, PCMag

I had an advance copy of this FIDO Alliance survey but didn’t have time to write it up in advance; fortunately, Thursday did have enough idle time for me to get this post written and filed.

5/8/2026: Smart Homes In Practice: Bridging Design, Integration, And Market Promises With Real Human-Centered Living Outcomes, Smarter Infrastructure Summit

I had a brief trip to Chicago–well, its suburb Rosemont–for this small conference. I was a late addition to this panel, in which moderator Lisa An Wong quizzed me and architect Stephen Yas and connect-home integrator Corey Ardell about ways to get homes and the appliances in them thoughtfully wired.

5/9/2026: Matter Smart Home Standard Still Looks Immaterial At Retail, Smarter Infrastructure Summit

The title of this talk I did mirrors the story I did for PCMag almost three years ago; that post caught the attention of the conference organizers, and the chance to revisit the topic and get in some practice with doing a solo presentation led me to accept their travel-expenses-covered invitation.

@jtb : an increasing number of people I know do no longer use desktops (that is, at home). An iPhone and an iPad, or an Android phone (and optionally a Chromebook), suffice for most people.

Commercial password managers will try to lock you in as a customer, while using open source (such as KeePass compatible) apps leads to other risks (such as stopped maintenance or malicious take over).

Most people I know even refuse to use password managers because of their complexity - while they enormously underestimate their risks by using one or a few weak passwords written on paper or stored in excel sheets.

Some of them feel betrayed after being advised to use TOTP 2FA - which is not phishing resistant, effectively *is* a password manager, too often without backups (of the shared secrets) being made, leading to account lockout after losing their phones (or app malfunction). And I'm not even considering privacy invasive and insecure TOTP apps such as Authy.

Nobody warned them of risks associated with TOTP, as nobody warns them for the risks that come with passkeys. People are, IMO, righfully not interested in the crap the industry is trying to enforce on them.

@rmondello @brandonbutler

#Passkeys #AccountLockout #Authentication #TOTP #Authy

@jtb : an increasing number of people I know do no longer use desktops (that is, at home). An iPhone and an iPad, or an Android phone (and optionally a Chromebook), suffice for most people.

Commercial password managers will try to lock you in as a customer, while using open source (such as KeePass compatible) apps leads to other risks (such as stopped maintenance or malicious take over).

Most people I know even refuse to use password managers because of their complexity - while they enormously underestimate their risks by using one or a few weak passwords written on paper or stored in excel sheets.

Some of them feel betrayed after being advised to use TOTP 2FA - which is not phishing resistant, effectively *is* a password manager, too often without backups (of the shared secrets) being made, leading to account lockout after losing their phones (or app malfunction). And I'm not even considering privacy invasive and insecure TOTP apps such as Authy.

Nobody warned them of risks associated with TOTP, as nobody warns them for the risks that come with passkeys. People are, IMO, righfully not interested in the crap the industry is trying to enforce on them.

@rmondello @brandonbutler

#Passkeys #AccountLockout #Authentication #TOTP #Authy

@jtb : an increasing number of people I know do no longer use desktops (that is, at home). An iPhone and an iPad, or an Android phone (and optionally a Chromebook), suffice for most people.

Commercial password managers will try to lock you in as a customer, while using open source (such as KeePass compatible) apps leads to other risks (such as stopped maintenance or malicious take over).

Most people I know even refuse to use password managers because of their complexity - while they enormously underestimate their risks by using one or a few weak passwords written on paper or stored in excel sheets.

Some of them feel betrayed after being advised to use TOTP 2FA - which is not phishing resistant, effectively *is* a password manager, too often without backups (of the shared secrets) being made, leading to account lockout after losing their phones (or app malfunction). And I'm not even considering privacy invasive and insecure TOTP apps such as Authy.

Nobody warned them of risks associated with TOTP, as nobody warns them for the risks that come with passkeys. People are, IMO, righfully not interested in the crap the industry is trying to enforce on them.

@rmondello @brandonbutler

#Passkeys #AccountLockout #Authentication #TOTP #Authy

@jtb : an increasing number of people I know do no longer use desktops (that is, at home). An iPhone and an iPad, or an Android phone (and optionally a Chromebook), suffice for most people.

Commercial password managers will try to lock you in as a customer, while using open source (such as KeePass compatible) apps leads to other risks (such as stopped maintenance or malicious take over).

Most people I know even refuse to use password managers because of their complexity - while they enormously underestimate their risks by using one or a few weak passwords written on paper or stored in excel sheets.

Some of them feel betrayed after being advised to use TOTP 2FA - which is not phishing resistant, effectively *is* a password manager, too often without backups (of the shared secrets) being made, leading to account lockout after losing their phones (or app malfunction). And I'm not even considering privacy invasive and insecure TOTP apps such as Authy.

Nobody warned them of risks associated with TOTP, as nobody warns them for the risks that come with passkeys. People are, IMO, righfully not interested in the crap the industry is trying to enforce on them.

@rmondello @brandonbutler

#Passkeys #AccountLockout #Authentication #TOTP #Authy

@rmondello : what makes passkeys strong:

1. Software checks the domain name, which makes phishing hard;

2. Https is enforced, which helps prevent AitM attacks (unless Cloudflare et al. come into play);

3. A unique, long, unguessible, randomly generated "password" (public key) per account: dumb password rules and broken human RNG's no longer apply.

The rest is marketing (including the -hyped- asymmetric cryptography).

The "advantage" of denying the owner access to their own private keys hardly makes sense as long as session cookies are not device-bound.

The disadvantage of not being able to back up ones own private keys is the risk of vendor lock-in and the underestimated huge risk of account lockout [1]. And the latter leads to the necessity of being able to log in using weak authentication after the user loses access to their private keys.

@brandonbutler

[1] https://seclists.org/fulldisclosure/2024/Feb/15

#Passkeys #Phishing #PhishingResistant #AsymmetricCryptography #AndroidPasskeys #androidPasskeysGone #iOSpasskeys #iPadOSpasskeys #ApplePasskeys #BackUp #Export #BackUpPasskeys #ExportPassKeys #PasskeyBackUps #PasskeyExports

Was genau ist ein Passkey?

Ein Passkey ist eine moderne und deutlich sicherere Alternative zum klassischen Passwort.

Anstatt sich komplizierte Passwörter merken zu müssen, meldet man sich einfach mit dem eigenen Gerät an – zum Beispiel per Fingerabdruck, Gesichtserkennung oder Geräte-PIN.

Der Passkey wird dabei sicher auf Ihrem Smartphone, Passwort-Manager oder Computer gespeichert.

Wie funktioniert das?

Vereinfacht gesagt bekommt jede Website zwei digitale Schlüssel:

Einen öffentlichen Schlüssel, den die Website speichert

Einen privaten Schlüssel, der nur auf Ihrem Gerät bleibt

Der private Schlüssel verlässt Ihr Gerät niemals.

[…]

#1password #ActivityPubPlugin #authentifizierung #bitwarden #blog #datenschutz #FediBlog #keepass #keepassdx #keepassxc #login #passkey #passkeys #passwort #passwörter #phishingschutz #sicherheit #wordpressBlog #WordPressFederation

Link zum kompletten Beitrag: https://mapf.net/u54k

This World Passkey Day, take a moment to thank your passwords for their years of service. Then, escort them gently to retirement before they reset themselves for the 14th time this quarter.

To every company still making users create complex passwords with inscrutable complexity rules, consider this your friendly intervention. The passwordless future is already here. Passkeys are making sign-ins faster, phishing-resistant, and dramatically less painful for users everywhere. That means fewer “Forgot Password?” clicks and fewer support tickets fueled by existential despair.

The time is now. Stop treating passkeys like a “coming soon” feature and start treating passwords like fax machines with better PR.

Happy #WorldPasskeyDay from all of us here at the FIDO Alliance.

#Passkeys #Passwordless #Authentication #Cybersecurity

🔐 Weil "sicher123" trotzdem nicht sicher ist: Denkt dran, heute ist #WeltPasswortTag!

#Passkeys, Mehrfaktor-Authentifizierung #MFA und #Passwortmanager werden zunehmend zum Standard, um Accounts besser vor #Phishing und Diebstahl zu schützen. Schwache oder mehrfach genutzte Passwörter gehören zu den häufigsten Sicherheitsrisiken!

Deshalb nutzt:
✅ starke Passwörter: Je Dienst ein eigenes Passwort
✅Passwortmanager
✅MFA
✅wo möglich auf Passkeys umsteigen

@dfncert

@bsi welchen Mehrwert bieten #Passkeys im Vergleich zu #passwortmanager ?

#worldpasskeyday #WeltPasswortTag #hilfe #help

Einfach gut gekorbt. 😎

Zum Welt-Passwort-Tag ein kleiner Reminder: Manchmal ist das Gras auf der anderen Seite eben wirklich grüner.

Zeit, sich von unsicheren Passwörtern zu verabschieden – und auf #Passkeys umzusteigen.

#PasswortKeyDay #Cybersicherheit #CybernationDeutschland

Microsoft Edge keeps all saved passwords in cleartext in RAM for the entire session, making memory scraping easier for attackers 🖥️
The behavior is “by design,” unlike Chrome, and highlights the risks of storing credentials in browsers instead of using password managers 🔑

🔗 https://cybernews.com/security/microsoft-edge-loads-cleartext-passwords-to-memory/

#TechNews #Microsoft #MicrosoftEdge #Edge #Google #Chrome #Browser #Password #CyberSecurity #FOSS #Privacy #Encryption #DigitalSafety #MFA #PasswordManager #Passkeys #Software #InfoSec #Security #RAM

#Canadian #election databases use "canary traps"—and they work

In a world awash in high-tech #security tools like #passkeys , quantum-safe algorithms, & public-key #cryptography , it can be refreshing to get back to the simple things... like a good old-fashioned #canary trap.

The canary trap is a simple tool often used to identify #leakers or #doubleagents. To make one, you simply share a document, image, or DB but make tiny changes that are unique to each recipient.

https://arstechnica.com/tech-policy/2026/05/in-canada-a-canary-trap-springs-shut-and-ids-election-database-leak/

OpenAI launches Advanced Account Security with YubiKey support to lock down ChatGPT accounts

https://fed.brid.gy/r/https://nerds.xyz/2026/05/openai-advanced-account-security-chatgpt/

While passkeys are an improvement on passwords in security terms, they are not perfect, and there are inevitable trade‑offs in their implementation.

https://www.computing.co.uk/analysis/2026/passkeys-in-the-enterprise-a-qualified-yes?utm_source=mastodon_org&utm_medium=post&utm_campaign=Apr_Passkeys

#passkey #passkeys #fido #cybersecurity #phishing #technews #infosec

UK Urges Adoption of Passkeys Over Passwords

Say goodbye to password headaches! The UK is leading the charge towards a more secure and user-friendly login experience with passkeys, which offer stronger resilience and eliminate many common cyber threats.

https://osintsights.com/uk-urges-adoption-of-passkeys-over-passwords?utm_source=mastodon&utm_medium=social

#Fido2 #Passkeys #PasswordManagement #NationalCyberSecurityCentre #Ncsc

@xssfox : no they're not.

IIRC client certs are bound to the TLS channel, while passkeys are bound to the domain name.

Passkeys do not protect against DNS domain takeovers or BGP hijacks (where a malicious website hijacks the domain name and obtains a valid https website certificate).

OTOH if your browser has a TLS connection to a MitM proxy such as Cloudflare or Fastly, you're dead in the water anyway.

#TLS #MitM #AitM #Passkeys

The UK National Cyber Security Centre (NCSC) has advised that passkeys should now be consumer’s first choice for authentication, and that the use of passwords should be gradually phased out.

https://www.computing.co.uk/news/2026/security/forget-passwords-passkeys-are-the-future-says-ncsc?utm_source=mastodon_org&utm_medium=post&utm_campaign=Apr_Passkeys

#passkeys #ncsc #uk #technews #passwords #cybersecurity #infosec #fido

I'm working to aggregate some common questions about #passkeys, both from non-technical and technical perspectives. These will be used in an end user facing site in the future.

Any and all feedback is welcome.

https://forms.gle/wmaydkzmUp2eKfJG7

(also would appreciate some reposts to widen the audience)

#passkey #webauthn #fido

El lado del mal - ¿Qué se necesita para tener seguras las identidades digitales en la empresa? https://www.elladodelmal.com/2026/04/que-se-necesita-para-tener-seguras-las.html #Identidad #2FA #ZSP #PAM #CIAM #ISPM #ITDR #Passkeys #MFA #IDP

El lado del mal - ¿Qué se necesita para tener seguras las identidades digitales en la empresa? https://www.elladodelmal.com/2026/04/que-se-necesita-para-tener-seguras-las.html #Identidad #2FA #ZSP #PAM #CIAM #ISPM #ITDR #Passkeys #MFA #IDP

El lado del mal - ¿Qué se necesita para tener seguras las identidades digitales en la empresa? https://www.elladodelmal.com/2026/04/que-se-necesita-para-tener-seguras-las.html #Identidad #2FA #ZSP #PAM #CIAM #ISPM #ITDR #Passkeys #MFA #IDP

El lado del mal - ¿Qué se necesita para tener seguras las identidades digitales en la empresa? https://www.elladodelmal.com/2026/04/que-se-necesita-para-tener-seguras-las.html #Identidad #2FA #ZSP #PAM #CIAM #ISPM #ITDR #Passkeys #MFA #IDP

El lado del mal - ¿Qué se necesita para tener seguras las identidades digitales en la empresa? https://www.elladodelmal.com/2026/04/que-se-necesita-para-tener-seguras-las.html #Identidad #2FA #ZSP #PAM #CIAM #ISPM #ITDR #Passkeys #MFA #IDP

#Passkeys: qué son, cómo funcionan y por qué van a jubilar tus #contraseñas

https://wwwhatsnew.com/2026/03/28/que-son-passkeys-claves-de-acceso-guia-completa/

Understanding passkeys: A fresh look at the authentication technology
https://marending.dev/notes/passkeys/
#via:amitp #passkeys #password #login #auth #+

Understanding passkeys: A fresh look at the authentication technology
https://marending.dev/notes/passkeys/
#via:amitp #passkeys #password #login #auth #+

Understanding passkeys: A fresh look at the authentication technology
https://marending.dev/notes/passkeys/
#via:amitp #passkeys #password #login #auth #+

Understanding passkeys: A fresh look at the authentication technology
https://marending.dev/notes/passkeys/
#via:amitp #passkeys #password #login #auth #+

Nuevo artículo comentando las Passkeys. En qué consisten y su estado actual comparado con las contraseñas tradicionales. Se agradece retoot & difusión -> https://alt43.es/passkeys-vs-contrasenas-mas-seguras-mas-complejas-y-poco-extendidas/
#passkeys #contrasenas #passwords

Unbelievable that #Hilton is still using this. Stop with the puzzles and image challenges to block #bots. #Privacy and usability matter more. Implement #passkeys and #OTP. This feels like a relic from another era.

Wegen #Signal ist #passkeys in aller Munde.

Aber das Verfahren ist wesentlich älter als die meisten vermuten

Es kommt aus dem Jahre 2013 und nennt sich #FIDO2

#passkeys ist eigentlich nur ein #Marketing Begriff

#Fido steht für Fast IDentity Online

Auf deutsch: schnelle Identität bei digitalen Verbindungen

https://de.wikipedia.org/wiki/FIDO2

#Datenschutz

Shame on Apple for not allowing better multi-factor authentication than a simple text message. I do not own or use Apple devices, yet I require an Apple account, primarily for accessing their podcast service.

They only support passkeys from Apple devices and security tools? That isn't standardization nor is it openness. Apple is a member of FIDO and they owe it to their users to do better.

#MFA #FIDO #passkeys

Экосистема SeedKey. Или как улучшить беспарольную аутентификацию

Почему беспарольная аутентификация с помощью девайс ключей не так распространена? И почему сайты неохотно внедряют её у себя? В статье мы попытаемся разобраться с ответами на эти вопросы, и я расскажу о моем эксперименте исправить это.

https://habr.com/ru/articles/984456/

#webauthn #passkeys #беспарольная_аутентификация #passwordless #browser_extensions #fido #helm_chart #seedkey #ctap #sdk

Экосистема SeedKey. Или как улучшить беспарольную аутентификацию

Почему беспарольная аутентификация с помощью девайс ключей не так распространена? И почему сайты неохотно внедряют её у себя? В статье мы попытаемся разобраться с ответами на эти вопросы, и я расскажу о моем эксперименте исправить это.

https://habr.com/ru/articles/984456/

#webauthn #passkeys #беспарольная_аутентификация #passwordless #browser_extensions #fido #helm_chart #seedkey #ctap #sdk

Экосистема SeedKey. Или как улучшить беспарольную аутентификацию

Почему беспарольная аутентификация с помощью девайс ключей не так распространена? И почему сайты неохотно внедряют её у себя? В статье мы попытаемся разобраться с ответами на эти вопросы, и я расскажу о моем эксперименте исправить это.

https://habr.com/ru/articles/984456/

#webauthn #passkeys #беспарольная_аутентификация #passwordless #browser_extensions #fido #helm_chart #seedkey #ctap #sdk

Экосистема SeedKey. Или как улучшить беспарольную аутентификацию

Почему беспарольная аутентификация с помощью девайс ключей не так распространена? И почему сайты неохотно внедряют её у себя? В статье мы попытаемся разобраться с ответами на эти вопросы, и я расскажу о моем эксперименте исправить это.

https://habr.com/ru/articles/984456/

#webauthn #passkeys #беспарольная_аутентификация #passwordless #browser_extensions #fido #helm_chart #seedkey #ctap #sdk

The #Mathematical #Language of #Consciousness : Medium

What are #Passkeys really? The simple explanation - for anyone tired of #Passwords : Misc

Great #Apes are #Humans’ closest #Relatives, but many are #Endangered by #Illegal trading. : Misc

Latest #KnowledgeLinks

https://knowledgezone.co.in/resources/bookmarks

Some time ago I mentioned Yubikey migration. Unfortunately in work I have to deal with #Microsoft and #Google services. Besides confusing #authentication settings UI I noticed interesting thing - both services in own way mixed #U2F and #passkeys in settings. It basically wasn't possible to know what I was going to set. Even terms used on popups were different in different process stages.

Later I could check it was saved on Yubikey as passkeys and it was probably the only way to be sure.

Now I wonder, why these settings were so mixed. Did they do it purposely? Just their "normal" UI/UX chaos?
Anyone who uses more mainstream, passkey-supporting services saw something similar? I didn't saw any other passkeys "in the wild" to compare.

Some time ago I mentioned Yubikey migration. Unfortunately in work I have to deal with #Microsoft and #Google services. Besides confusing #authentication settings UI I noticed interesting thing - both services in own way mixed #U2F and #passkeys in settings. It basically wasn't possible to know what I was going to set. Even terms used on popups were different in different process stages.

Later I could check it was saved on Yubikey as passkeys and it was probably the only way to be sure.

Now I wonder, why these settings were so mixed. Did they do it purposely? Just their "normal" UI/UX chaos?
Anyone who uses more mainstream, passkey-supporting services saw something similar? I didn't saw any other passkeys "in the wild" to compare.