Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

No one has managed yet to explain to me how you recover access to an account using these passkeys if you somehow lose access to all your devices.

Note that i said "all your devices" so the cloud backup you dream of will also be inaccessible because I can't authenticate to that either.

And I know about backups... what about your average user who is likely to own a single phone and no other device? They lose access to everything if they drop it in the toilet?



Now extend that; it's not you trying to recover access, it's your relatives or heirs trying to do so, because you are incapacitated or dead.



Can't add those after the fact.


Sorry, but that is a weak argument. Individually, people have to take responsibility for their security. The tools exist and are simple to use.


It's not an argument, it's just reality.


https://safety.google/authentication/passkey/

> Yes, you can continue to log in using your traditional log in [sic] method, which in most cases would be using your username and password.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: