Post by @Taffer@mastodon.gamedev.place

@Taffer@mastodon.gamedev.place

2026-09-09 14:34 UTC

Friends don't let friends use passkeys. They're not portable between "security devices". Say you're moving from @1password@1password.social to @bitwarden@fosstodon.org because 1Password supports fascists who want to ethnically cleanse Europe. Passkeys don't migrate, and going through all of your passwords, then logging into each site to delete the passkey is painful. A nice long random password, plus TOTP/OTP/"Authenticator" codes are best. #1Password #Drop1Password #Bitwarden #passkey #totp

Replies (4)

@q@glauca.space 2026-09-09 14:48

@Taffer@mastodon.gamedev.place @1password@1password.social @bitwarden@fosstodon.org This is a lie https://bitwarden.com/blog/security-vendors-join-forces-to-make-passkeys-more-portable-for-everyone/

Open ##5239775
@foxbasealpha@tech.lgbt 2026-09-09 14:57

@Taffer@mastodon.gamedev.place @1password@1password.social @bitwarden@fosstodon.org Until the seed gets compromised. Passkeys are portable, but it depends on the implementation. Apple’s appears to be very good, though relies on buying into their ecosystem. Google’s isn’t great (there’s been some security concerns about storing them in a Google account). The best is a FIDO2 key, preferably with USB-A/C and NFC…

Open ##5239777
@pizzaclick@hachyderm.io 2026-09-09 18:14

@Taffer@mastodon.gamedev.place Passkeys do migrate: https://rmondello.com/2026/09/07/switching-password-managers-2026/

Open ##5239780
@joat@mastodon.scot 2026-09-09 15:29

@admin@myonlinepi.uk @Taffer@mastodon.gamedev.place @1password@1password.social @bitwarden@fosstodon.org I exported from Bitwarden and imported to KeepassXC and the passkeys worked, FWIW

Open ##5243839