logoalt Hacker News

ranger207today at 3:35 PM4 repliesview on HN

The website for my HSA required me to set up a passkey last time I logged in. I set it up on my work laptop and my work password manager, which means I can now no longer access my account from my personal computer. This is fantastic, just what I wanted


Replies

nitwit005today at 5:17 PM

And then you call them up, and they allow you in after asking some identity questions, and you learn there's no real security.

cpburns2009today at 4:03 PM

This is exactly a scenario that worries me. Proponents of passkeys imply you can setup a bunch of passkeys. Evidently that's not always the case.

show 1 reply
spharstoday at 6:12 PM

Are you also using HealthEquity for your HSA? I'm the same boat, they're forcing passkeys on me. I can still login using my employer's SSO but I've been putting off setting up the passkey until I have to.

show 1 reply
rdsubhastoday at 4:22 PM

I think the irony here is missed.