126
submitted 2 days ago by libewa@feddit.org to c/privacy@lemmy.ml

A rebuttal to an anti-passkey, pro-TOTP post that has made the rounds on Lemmy as well.

you are viewing a single comment's thread
view the rest of the comments
[-] icelimit@lemmy.ml 7 points 1 day ago

The way i understand it, passkeys test for a combination of what you have and what you are (for those that check user presence, which is all of them I suppose); whereas passwords test what you know.

From my reading, passkeys give more control to the platform/service provider, whereas passwords do the reverse.

The former clearly benefits corps in their unique ways - motivated by profit, security, data/spying and so on.

The current iteration of passkeys is not the form that is being challenged by the earlier anti-passkey post. But rather a floodgates problem. Pretending that it will never happen is asking for trouble.

The better option (be it passwords or passkeys) needs to demonstrate that it gives control to the user.

I'm in the passwords camp, I do not see what convenience or added security passkeys might provide in any of my use cases that is worth sacrificing my level of control and choice.

this post was submitted on 14 Oct 2026
126 points (75.0% liked)

Privacy

51431 readers
959 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 7 years ago
MODERATORS