Passkeys replacing Passwords

[jedishrfu]

TL;DR Summary

Passkeys are replacing passwords as a better means of secure signing to web sites.

https://www.wired.com/story/what-is-a-passkey-and-how-to-use-them/

PASSWORDS SUCK. THEY'RE hard to remember, but worse is playing the ever-evolving game of cybersecurity whack-a-mole with your most important accounts. That’s where passkeys come into play. The so-called “war on passwords” has taken off over the past two years, with titans like Google, Microsoft, and Apple pushing for a password-less future that the FIDO Alliance (a consortium made to “help reduce the world’s over-reliance on passwords”) has been trying to realize for over a decade.
...
{/quote]

 

[sbrothy]

TL;DR Summary: Passkeys are replacing passwords as a better means of secure signing to web sites.

https://www.wired.com/story/what-is-a-passkey-and-how-to-use-them/

I really don’t find my passwords that hard to remember. I use a pattern which can be varied endlessly. I use a little stronger one on my e-mail as that’s where all the passwords to various sites can be reset.

Apropos not much:

Paasword Strength

 

[jack action]

This made me laugh:

Passkeys are broadly integrated at an operating system level. If you’re using an OS that doesn’t natively support passkeys—i.e., Linux—you can still use them.

Linux has been using SSH for decades with that same principle, securing practically all the servers of the internet:

Authentication: OpenSSH key management​

On Unix-like systems, the list of authorized public keys is typically stored in the home directory of the user that is allowed to log in remotely, in the file ~/.ssh/authorized_keys. This file is respected by SSH only if it is not writable by anything apart from the owner and root. When the public key is present on the remote end and the matching private key is present on the local end, typing in the password is no longer required. However, for additional security the private key itself can be locked with a passphrase.

But GAFAM has to invent some other way to do the same thing.

I still fail to see any serious advantage over the use of a password manager with random passwords.