logoalt Hacker News

silon42today at 12:31 PM2 repliesview on HN

Is there a reason why passkeys couldn't be used in "expire-periodically" mode?


Replies

hannasanariontoday at 12:48 PM

What benefit does that give you? Passkeys cannot be moved, by design. So for the website, recieving the same one means you're talking to the same device, always.

The purpose of rotating passwords is to cycle out potentially compromised ones, due to phishing attacks, keyloggers, shoulder snoops, etc. But those cannot exist with a passkey.

show 1 reply
pletnestoday at 12:33 PM

Then how do you log in? Not all sites let you keep password logins after.