We had originally planned to go all-in on passkeys for ONCE/Campfire, and we built the early authentication system entirely around that. It was not a simple setup! Handling passkeys properly is surprisingly complicated on the backend, but we got it done. Unfortunately, the user experience kinda sucked, so we ended up ripping it all out...
  • uiiiq@lemm.eeEnglish
    331·
    16 days ago

    My thoughts exactly. I use Bitwarden and passkeys sync flawlessly between my devices. Password managers tied to a a device or ecosystem are stupid and people shouldn’t use them. This is true whether you use passwords or passkeys.

    That said, we cannot blame users for bad UX that some platforms and some devs provide.

    • Tetsuo@jlai.luEnglish
      51·
      16 days ago

      Isn’t your password manager tied to an ecosystem with Bitwarden ?

      I’m surprised people trust third parties to hold their passwords.

      Wasn’t there multiple password managers that got powned over the years ?

      If you can sync Passwords you are also more exposed than some unhandy secure local password storage.

      • 4am@lemm.eeEnglish
        7·
        16 days ago

        Wasn’t there multiple password managers that got powned over the years ?

        Pretty much only LastPass

      • uiiiq@lemm.eeEnglish
        4·
        16 days ago

        I can use bitwarden on Windows, Linux, Mac, iOS, Android, on desktop app or using CLI. That’s a stark difference in comparison with built in Microsoft or Apple keychains. And yes, I trust Bitwarden.

    • iopq@lemmy.worldEnglish
      36·
      16 days ago

      Bitwarden is not usable on Linux desktop, keeps asking for password. The password can’t be too short, so it takes some time to type it in. I turn off my computer when it’s not needed, so I would just need to type in the password when I turn it on again.

      Anyone have a better solution?