Technology

59373 readers

8430 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

271

Passwords have problems, but passkeys have more (world.hey.com)

submitted 1 month ago by exu@feditown.com to c/technology@lemmy.world

187 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] azalty@jlai.lu 2 points 4 weeks ago* (last edited 4 weeks ago) (3 children)

I imagine you keep your password manager unlocked, or as not requiring 2FA on trusted devices then? Re entering 2FA each session is annoying

You still have the treat of viruses or similar. If someone gets access on your device while the password manager is unlocked (ex: some trojan on your computer), you’re completely cooked. If anything it makes it worse than not having 2FA at all.

If you can access your password manager without using 2FA on your phone and have the built in phone biometrics to open it like phone pin, finger or face, someone stealing your phone can do some damage. (Well, the same stands for a regular 2FA app, but meh, I just don’t see an improvement)

[–] interdimensionalmeme@lemmy.ml 4 points 4 weeks ago

If your secrets enter your clipboard, they are no longer secrets

[–] ByteOnBikes@slrpnk.net 4 points 4 weeks ago (1 children)

I went to see HR a month ago and they had a post-it of their password for their password manager. We use passkeys too.

And this was after security training.

[–] azalty@jlai.lu 1 points 4 weeks ago

😵 some people just don’t care

It’s their job though, not their personal life, so they might care less

[–] sem@lemmy.blahaj.zone 1 points 2 weeks ago

You're right if I get a virus I'm pretty cooked. Except I think to set 2fa up on the attacker's device they'd need the phone authenticator to set it up the first time, so hopefully they couldn't do it unless they used my computer remotely to login to websites.

But the password manager locks after 15 min and you have to put a pin in to unlock and decrypt.

I'm not sure what brute force mechanisms it has against the pin.

Re-entering the 2fa each session is annoying but it's way better than having to do it on each individual site from my phone.