The author argues that while passkeys are technically secure against phishing and server breaches, they are poorly suited for personal use due to risks of permanent account lockout, device loss, and costly hardware key backups. The piece highlights that passkeys create a false sense of security since account recovery still relies on weaker methods like email or SMS.
Background
Passkeys have been widely promoted by Google, Microsoft, and Apple as the next-generation replacement for passwords, leveraging public-key cryptography for safer and more convenient authentication.
- Source
- Lobsters
- Published
- Sep 18, 2026 at 08:52 PM
- Score
- 5.0 / 10