A separate question regarding logging in with biometrics.
-
A separate question regarding logging in with biometrics. WTF is this sign in with your PIN, face, or fingerprint option that eBay wants me to choose? Is this separate from a passkey? I can't find any documentation on this.
-
Ah, OK. This is just another term for passkey (in this case one that's resident on my Windows laptop).
So even when I already have a passkey synced through 1Password, eBay is going to suggest I create a separate passkey that's native to the OS I happen to be using at the moment. This is only going to confuse people and discourage the adoption of passkeys.
I love the technology behind passkeys, but they're not (yet) anywhere close to qualifying as usable security.
-
@dangoodin Well-said. The patchy rollout of passkeys has resulted in an incredibly inconsistent UX across websites. I’m excited for the days ahead when it becomes more standardized and thus secure, but we’ve got a ways to go until then.
-
@pb4000 @dangoodin Also, need to find a way to explain what they are in human-comprehensible language.
-
@timbray @pb4000 @dangoodin this is really frustrating. I wrote a thing about the inconsistencies a few weeks back https://systemsapproach.org/2024/10/14/can-passkeys-replace-passwords/
-
@Drbruced @pb4000 @dangoodin That thing is the clearest explanation I'd actually read. Every single other fucking piece I've read had swirls of marketing verbiage, nobody said “It's keypair tied to an instance of credible authentication". Yeah, U/X is tough. I already have dueling password stores at most sign-in forms without benefit of passkeys.
