It's good but for some reason I can't use them on my degoogled android phone. Doesn't pop up to select.. It thinks I want to use a yuibkey or other device.

[–] towerful@programming.dev 13 points 1 day ago* (last edited 1 day ago)

Yeh, I have passkeys in bitwarden.
I get it. Once they become ubiquitous, you click "login" your password manager prompts you to select account, and you are in.
No password that can be leaked, incorrectly stored, brute forced.
Corporations can pre-register company service passkeys for new users.
It's like mTLS, except staged.

[–] suicidaleggroll@lemmy.world 7 points 1 day ago (2 children)

While true, it still means you're locked into only being able to log in from a browser that has the password manager extension installed and logged in. Sometimes I want to log in from another machine, or another OS, or another browser, or even an incognito window that doesn't have access to my extensions.

[–] Vittelius@feddit.org 1 points 7 hours ago

That's what hardware keys are for. Even the cheap lines of fido USB keys (ca $20) can safe passkeys. And your phone can too.

[–] ricecake@sh.itjust.works 7 points 19 hours ago

You can do that without an extension. There's a bunch of different protocols that let you, for example, use your phone as the authenticator.
You can log in with your phone on a computer you've never used before by scanning a QR code and credentials never leave your device.

[–] Sir_Kevin@lemmy.dbzer0.com 1 points 23 hours ago

KeepassDX as well.