they should have some kind of public key cryptography-based thing instead of passwords *an aide whispers in my ear* that's what passkeys are??

i gotta be honest, i ignored passkeys because A) they sounded like a harry potter thing and B) i didn't see the appeal, but now i get it. i think they're good

@BestGirlGrace they’re that but with corporations controlling “your” private key in most implementation so it’s actually kinda trash unfortunately.

if there’s a way i can use them but in keepass between both my phone and desktop I’d probably try them but for now, nah

plus, hey, i get to do some public key cryptography. that's always fun

also, there is something futuristic about plugging a little thing into the computer to authenticate. highly recommended

i gotta set it up for SSH and GPG stuff, too

i will admit the value prop for passkeys isn't quite as good when you open with "well, to do it right, order this $60 doodad (ideally two) and never ever lose it"

well, okay. you actually just need a $20 doodad if you just care about passkeys and not the nerd stuff

@BestGirlGrace having a password that I can physically misplace and must always carry with me sounds like it's identical to just leaving my computer with automatic passwordless login enabled

it's just not having a password at all with extra steps and extra ways it can go wrong

@ben @BestGirlGrace both hardware and software based passkeys come with pins you need to enter although the means and the frequency vary

@ben

i'd set it up as a second factor for logging in to the computer, but that's beside the point because when people say "passkey", they're talking about logging into websites (where any stranger can try and guess or phish your password) instead

@BestGirlGrace yeah but a password manager costs $0, comes free with every web browser, and can't be fooled by phishing websites

@ben @BestGirlGrace for the most part i use my password manager’s passkey feature, and my yubikey to unlock my computer and password manager. older security keys tend to have very few slots for passkeys

@charlotte @ben honestly, i mostly use the yubikey for setting up a new computer

right now i copy over my password database, but having something with less manual bootstrapping is nice.