A new login technique is becoming available in 2023: the passkey. The passkey promises to solve phishing and prevent password reuse. But lots of smart and security-oriented folks are confused about what exactly a passkey is. There’s a good reason for that. A passkey is in some sense one of two (or three) different things, depending on how it’s stored.
  • tippl@lemmy.world
    31·
    1 year ago

    if somebody compromises you, physically, they can see everything you can log into

    Can they though? I own a few yubikeys with passkeys stored inside and i cannot query stored logins without entering a pin.

    • jet@hackertalks.comEnglish
      12·
      1 year ago

      Right, so they coerce you to unlock the yubi key (threats, torture, finger removal, etc) and now they see all your passkeys and what they belong to. It’s a menu of your activity.