Because it's just a glorified password manager. But instead of your master password being kept securely in your head, your master password is now in the hands of Google or Apple or Microsoft.
KeePassXC just today released support for storing passkeys in your own keepass database file. And they're not just "glorified passwords". They're private keys that use challenge-response authentication so they're never actually sent over the network. Harder to compromise.
Using passkeys with some kind of personal database is ultimately an objective improvement over hodge podge username and password mechanisms, so they're only going to continue being adopted further.
The only case they don't really work for is when you want to log in to a computer that doesn't have access to your passkeys.
My password database has over 300 credentials. I think most people have more credentials for things (online accounts, also physical locks, device passwords, etc.) than they can remember.
I’m sure tens of millions of people said that before being breached and having their password “John1974Smith” leaked. Maybe don’t say anything if you don’t understand basic security protocols and technology.
The average person is not a special boy like you. You’re literally in a post showcasing what the average person is like with their information. Security is meant to protect against those people.
Who the fuck is putting cryptographic keys which can dispossess them of so much money on a phone to begin with?
Let them bitch about a malicious app dev stealing it, at least they still have their thumbs.
The same sorts of people who are enthusiastically embracing Google's "Passkey" scam.
how are passkeys a scam
Because it's just a glorified password manager. But instead of your master password being kept securely in your head, your master password is now in the hands of Google or Apple or Microsoft.
KeePassXC just today released support for storing passkeys in your own keepass database file. And they're not just "glorified passwords". They're private keys that use challenge-response authentication so they're never actually sent over the network. Harder to compromise.
Using passkeys with some kind of personal database is ultimately an objective improvement over hodge podge username and password mechanisms, so they're only going to continue being adopted further.
The only case they don't really work for is when you want to log in to a computer that doesn't have access to your passkeys.
Removed by mod
KeePass(XC) is open-source.
Removed by mod
You don't actually use your brain lmao. How many online accounts do you have?
Removed by mod
My password database has over 300 credentials. I think most people have more credentials for things (online accounts, also physical locks, device passwords, etc.) than they can remember.
Removed by mod
I’m sure tens of millions of people said that before being breached and having their password “John1974Smith” leaked. Maybe don’t say anything if you don’t understand basic security protocols and technology.
The average person is not a special boy like you. You’re literally in a post showcasing what the average person is like with their information. Security is meant to protect against those people.
Removed by mod
KeePassXC is self-hosted on your local machine. There's no third party to compromise because it's just you who has access, offline.
Removed by mod
You are being reactionary.
Removed by mod