Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Passkeys are quite disappointing in practice. I feel like they were described as ssh keys for website logins but they seem to be half-baked. Accessibility concerns and vendor lock-in are certainly an issue.

Definitely stick to keeping passwords and passkeys in a password manager for portability. KeepassXC and Bitwarden (which can be self-hosted) work best for this in my opinion.



Why would I keep them separate? What does this achieve?


Are you replying to the right post or did parent edit?


I’m now not sure if there was an edit or if my brain inserted a word. When I replied, I thought I read that they were saying to keep passwords and passkeys in separate password managers, but maybe I’m just going crazy.


Keep what separate?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: