Post

BellCube
@bellcube.dev

Semi-regular reminder that #passkeys are probably the greatest thing to ever hit the #authentication scene since password hashing #cryptography. Convenient for users, impossible to #phish, and simple enough you can safely roll passkey support yourself. Only caveat is transferability... #webdev #auth

0 reposts7 likes

BellCube
@bellcube.dev

Now, of course, #passkeys not being transferable is a mainstay, so how do we solve this problem? My solution when I was looking at it was to use one passkey to authenticate another one. New devices would create a "Passkey Request" (behind a CAPTCHA) and an existing device would approve the request.