logoalt Hacker News

lapcatlast Wednesday at 6:56 PM2 repliesview on HN

> It's an open protocol, you don't need to use any of the vendors. My Yubikey is a "passkey", so is my Flipper Zero. Keepass provides passkey support.

I don't want to use a Yubikey. It's a pain in the butt. I just want to use my Mac, with no more damn dongles.

Keepass is a vendor, and one who doesn't even have a Safari extension.

> Nothing wrong with extending this to passkeys, it's convenient and makes sense for them.

I didn't say there was anything wrong with extending this to passkeys. The problem is the lock-in, e.g., Safari requires iCloud keychain for passkeys, but not for passwords. And there is no plaintext export/import, unlike with passwords.

Nobody can convince me that passkeys are good when I buy a Mac and use the built-in Safari but can't even use passkeys to log in to websites unless I give my passkeys to a cloud sync service or have to install some third-party "solution" (for a problem that should not exist in the first place). That experience is so much worse than passwords.


Replies

peanut-walruslast Wednesday at 7:10 PM

So don't use software that forces lock-in (Safari)? Sounds like a you problem.

show 1 reply
happyopossumlast Wednesday at 7:16 PM

> Safari requires iCloud keychain for passkeys

Repeating this doesn’t make it true. https://developer.apple.com/documentation/authenticationserv...

All of the 3rd party credential managers I’ve used that support passkeys work with safari, and through the APIs that Apple offers the credential managers you can even pick your default CM and never think about iCloud again…

show 1 reply