Wtf is this...they say password managers aren't very secure, but then recommend Passkeys which is literally the same thing... But less secure because they rely on biometrics which you can't ever change, or a pin which is well..a damn password
this post was submitted on 10 Mar 2025
7 points (61.3% liked)
Privacy Guides
18780 readers
113 users here now
In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
- We prefer posting about open-source software whenever possible.
- This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
- No soliciting engagement: Don't ask for upvotes, follows, etc.
- Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
- Be civil, no violence, hate speech. Assume people here are posting in good faith.
- Don't repost topics which have already been covered here.
- News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
- Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
- No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
- No misinformation: Extraordinary claims must be matched with evidence.
- Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
- General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.
Additional Resources:
- EFF: Surveillance Self-Defense
- Consumer Reports Security Planner
- Jonah Aragon (YouTube)
- r/Privacy
- Big Ass Data Broker Opt-Out List
founded 2 years ago
MODERATORS
Anyone who starts off telling you that they're the most popular and trusted should probably not, in fact, be trusted. Especially if they're calling for not using password managers. Passkeys are interesting in theory, but my understanding is that most of the implementations are just another way for big tech to track you.
Passkey doesn't require biometrics necessarily. Password managers are adding support for them, so you can use bitwarden for example which supports password and a security device combo to login and use the passkeys. Passkeys should be more secure than passwords in a password manager since it would only allow using it in the proper domain preventing attacks like opening malicious links in emails or typos when typing a domain manually.
That said a lot of the current approaches to passkeys do use biometric / pin to unlock so you gotta find what's right for your OPSEC values.
All that said, the article seems pretty bad.
Untill keepass supports them i will stick to my 32 or 64 char passwords keepass generates
If you’re using KeePassXC, it supports them right now. I’m using them on a few websites with the browser extension. Your mileage may vary, of course.
I use KeepassDX on android as my phone is the device i use most often.
I do use KeepassZC when i am on the laptop, but thats really not often
Does KeePassXC work on ios?
For KeePassXC itself, no. I use KeePassium on iOS, which seems to be compatible with most of KeePassXC’s features.
Bummer... no mention of the drawbacks whatsoever.
Passkeys are FIDO credentials tied to a specific app or website that let you sign in with the same method you use to unlock your device, be that biometrics or a PIN.
As long as you can remember your phone password, you can log in to your accounts.
So... What if your phone is stolen or if you wanted to share a login with your partner?
How do passkeys work then?
And if a very simple pin or phone password is all it takes to gain access to your stuff, isn't it less secure?