totp is not a second password, it is immune to data/password leaks because it ex... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		slt2021 85 days ago \| parent \| context \| favorite \| on: The cryptography behind passkeys totp is not a second password, it is immune to data/password leaks because it expires quickly

Spooky23 85 days ago [–]

Not really. You just need a working clock and the string. Conveniently available in your password manager.

zie 85 days ago | [–]

Same with passkeys when you think about it. Just need the private key.

For fingerprints/etc you generally just need a great camera.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact