mars, 8 months ago to android in Bitwarden begins adding passkey support to its password manager - The Verge

You’re thinking about “device-bound passkeys”. Bitwarden and any other third-party credential manager leverages “synced passkeys” because they don’t control the hardware.

Synced passkeys are actually called out in the FIDO Alliance’s FAQs as preferred since they more closely align with the desired replacement of traditional passwords.

hedgehog, 8 months ago to technology in Google will now make passkeys the default for personal accounts

The site likely didn’t support passkeys. But passkeys are basically webauthn passwordless login, and per the yubikey docs they support that.

See www.yubico.com/authentication-standards/fido2/ and fidoalliance.org/passkeys/#faq for more info. See also support.apple.com/guide/iphone/…/ios specifically the bit about adding a passkey to a physical key.

confusedbytheBasics, 8 months ago to technology in Google will now make passkeys the default for personal accounts

It doesn’t feel better? Good thing security doesn’t care about feelings. The fact is it is more secure no matter what it feels like. Privacy is maintained since you use a new key with each site. There is no IMEI or anything like that in the passkey spec. Social engineering ranges from more difficult to impossible depending on if you use a synced, local software based, or hardware based passkey system.

You have a lot of incorrect assumptions. Read support.apple.com/en-us/102195 and fidoalliance.org/passkeys/#faq.

megane_kun, 11 months ago to philippines in Daily random discussion - Jul 21, 2023

I just make use of a master password and then save the password database in my Dropbox. The password database itself is encrypted and locked with the master password so it’s relatively safe. That’s what their FAQ tells me anyways.

Maybe it’s one of the things where KeePass and KeePassXC differ though.