Post #1185420

2026-04-15 20:52 UTC

@encthenet@flyovercountry.social If I can't print it on paper and store it in my safe deposit box, it's not "something I know." I'm certainly not going to authenticate with "something my computer knows."

Replies (2)

@patpro@social.patpro.net 2026-04-16 08:41

@mwl@io.mwl.io @encthenet@flyovercountry.social what you describe is essentially every password manager on Earth. I got something like +400 entries in my password manager, there’s no way I know them all, so it’s basically something my computer knows. Same goes obviously for passkeys I store in that safe, or that are inside my Yubikeys. Still, it’s super robust, and far more safe than anything «I know». Also, using passkey does not mean you have to share them with Apple or anyone else. If you care, use a physical key or a selfhosted password manager.

Open ##2238400
@dchest@mastodon.social 2026-04-18 23:09

@mwl@io.mwl.io @encthenet@flyovercountry.social KeePassXC shows private keys for passkeys, so you can print them out 😀 It basically turns into ssh key management for websites. The keys are even in —BEGIN STUFF— format!

Open ##2238401