this post was submitted on 16 Oct 2024
272 points (86.4% liked)

Technology

59982 readers
4137 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 20 points 2 months ago* (last edited 2 months ago) (1 children)

Passkeys are unique cert pairs for each site. The site gets the public key, you keep the private to login under your account. The site never stores your private key.

To store them simply, turn off your browsers password/passkey storage. Store them in your password manager along with other sites passwords.

[–] [email protected] 7 points 2 months ago* (last edited 2 months ago) (1 children)

Sounds similar to the SSL stuff, like for GitHub and stuff. I guess the preference in that case would be my password manager as it stores my password already.

Perhaps it's best I pay for Bitwarden premium now and use those hardware keys people are recommending.

Also thanks!

[–] [email protected] 14 points 2 months ago

Because its the same shit. passkeys are essentially passwordless ssh certificates. we've had functional MFA for ssh literally since its inception.