Post

Passkeys are not a Trap by @scotthelme.bsky.social scotthelme.co.uk/passkeys-are...

scotthelme.co.ukPasskeys Are Not a TrapA post called Passkeys are a trap. Do not use them. has been doing the rounds over the last few days, making it pretty high on Hacker News, and I've had it sent to me many times with an 'is this true?...

14/10/26, 2:01 pm2 reposts11 likes

Avatier

@avatier.com

A push prompt can be approved by a tired user on a fake sign-in. A passkey gives that user nothing to approve on a lookalike site, because the browser only offers it on the real domain.