• Bitrot@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    0
    ·
    7 months ago

    Yes, but do you need to unlock your key to use it? Possession is not enough to access discoverable credentials.

      • Bitrot@lemmy.sdf.org
        link
        fedilink
        English
        arrow-up
        0
        ·
        7 months ago

        In that case it does sound better, and many sites using passkeys still have you enter your username first anyway, at least at this point. I don’t know how Android implements it, I think iOS likely supports this use case and know that it also works as a second factor to a password through the same Passkey workflow. Unlike the Yubikey it always stores the key when you register though, even if it isn’t fully passwordless. Unfortunately what’s easy for the consumer will dominate.