alt Hacker NewsProton Pass is on the official Passkey client naughty list[1]. I hope the services you log in to don't choose to ban it because of those big, scary X's.
Replies
summermusic • yesterday at 3:22 PM
(I might be wrong, please correct me if I am) What I'm gathering from this page is that the Passkey spec can specify whether the app handling the passkey should prompt the user for biometric scan, PIN code, etc. but some apps simply ignore that flag. This makes sense though. I've already logged into my password manager and it hasn't timed out yet, so why would my password manager prompt me again? I'm glad that they don't prompt me again when I'm already logged in. I don't see this as a problem.
➕ show 2 replies
The fact that services can ban passkey providers is a major red flag in the protocol and the real issue that nobody talks about
well, people are talking about it but it's not making a difference https://lucumr.pocoo.org/2025/9/2/passkeys/