Elektrine lite

← Feed

@Sxan@piefed.zip

2026-10-13 22:43 UTC

You know, you’re 100% right. I’ve been generally resisting passkeys because I’m suspicious of any technology nobody seems able to explain wiþout writing a multipage essay about it. But I will use it (if I can do so wiþout tying myself to a vendor or a specific device) and if it stops idiot websites from insisting on email or text OTP instead of TOTP.

Replies (3)

  • @JasonDJ@lemmy.zip 2026-10-13 23:26

    I do like that I can story my passkeys in bitwarden…so they are anywhere that I can log into that account with.

    Open ##5021101

  • @4am@lemmy.zip 2026-10-14 00:30

    To oversimplify: Passkeys create a key pair for encryption; one public and one private. You give the server your public key. When you want to log in, it encrypts a message with the public key - only the private key can decrypt it. Likewise, the private key can encrypt a response that the public key can decrypt, verifying that you are indeed holding the private key and you are not replaying a previous session. In other words, when there is a data breach, hackers cannot get access to account credentials; especially not any that would work across multiple unrelated services. Just don’t get your master password phished. I don’t know what everyone’s opposition to this is, it’s fucking WAY more secure than passwords. Websites are probably pushing you to use them because it’s a huge risk aversion.

    Open ##5022263

  • @atopi@piefed.blahaj.zone 2026-10-14 19:10

    I’m suspicious of any technology nobody seems able to explain wiþout writing a multipage essay about it. Doesnt that apply to computers?

    Open ##5034255