Technology

43468 readers

443 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 4 years ago

MODERATORS

remington@beehaw.org

alyaza@beehaw.org

TheRtRevKaiser@beehaw.org

gyrfalcon@beehaw.org

rs5th@beehaw.org

coldredlight@beehaw.org

SemioticStandard@beehaw.org

Logging In Was Never Supposed to Be This Complicated (www.theatlantic.com)

submitted 3 days ago by alyaza@beehaw.org to c/technology@beehaw.org

12 comments fedilink hide all child comments

Lately, the process of accessing apps and websites has grown dizzying. “I’m in password hell,” a colleague confided to me recently. “Every login attempt is playing the lottery.” The problem is not just the sheer number of digital accounts, all of which require their own password, ideally unique and unguessable (which usually also means un-memorizable). It’s the pileup of solutions to that problem: all of the different layers of software offering to remember your passwords, the six-digit codes sent to your phone, the authenticator apps, the passkeys.

you are viewing a single comment's thread
view the rest of the comments

[–] panda_abyss@lemmy.ca 9 points 3 days ago (1 children)

Yesterday my partner asked me about passkeys and I had to finally have the talk with her.

[–] Maestro@fedia.io 9 points 2 days ago (1 children)

That passkeys suck and that username + password + optional totp managed by a password manager is by far to easiest solution?

[–] panda_abyss@lemmy.ca 5 points 2 days ago* (last edited 2 days ago) (1 children)

Yes! Passkeys don’t solve anything.

I just don’t see how you can do passkeys without still having passwords, so it’s nice that it can’t be phished, but your password still can! (I mean, you can go magic/email link only, but that’s annoying AF)

If you did go pure passkeys, the second someone gets a new computer or phone, or switches phone type, or they have a house fire and their devices get destroyed, they’re kinda fucked.

Unless they have a password manager, which is a single point of failure that a lot of people don’t trust. But that doesn’t fix the above issues.

So where I’m at is keep your main passwords or password manager backup auth codes in a safe deposit box and just do whatever the fuck you find easier, and hope your house doesn’t burn down.

[–] Kache@lemmy.zip 3 points 2 days ago

Passkeys are good at the fundamental level, but the practical implementation is lacking, despite their efforts.

IMO best way is /w a pw manager that's also backed up, available, and synced everywhere you need it, but that's a hurdle for most users.

I think the "intended way for normal ppl" is to set multiple keys, each on their trusted devices, like backup physical keys, but that's kind of a pain to have for every service, too.