Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you use good passwords, I don't think they're any more guessable than passkeys.


I think the difference is that good passwords are still replayable. Such that moving away from bearer style tokens is a win. But if I have no way of controlling the use of individual passkeys, they lose a lot.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: