A new login technique is becoming available in 2023: the passkey. The passkey promises to solve phishing and prevent password reuse. But lots of smart and security-oriented folks are confused about what exactly a passkey is. There’s a good reason for that. A passkey is in some sense one of two (or three) different things, depending on how it’s stored.
  • @tippl@lemmy.world
    4•2 years ago

    if somebody compromises you, physically, they can see everything you can log into

    Can they though? I own a few yubikeys with passkeys stored inside and i cannot query stored logins without entering a pin.

    • @jet@hackertalks.comEnglish
      1•2 years ago

      Right, so they coerce you to unlock the yubi key (threats, torture, finger removal, etc) and now they see all your passkeys and what they belong to. It’s a menu of your activity.