Post #2595472
2026-05-10 20:21 UTC
Replies (2)
-
@ErikvanStraten@todon.nl 2026-05-10 21:03
@jtb@toot.wales : an increasing number of people I know do no longer use desktops (that is, at home). An iPhone and an iPad, or an Android phone (and optionally a Chromebook), suffice for most people. Commercial password managers will try to lock you in as a customer, while using open source (such as KeePass compatible) apps leads to other risks (such as stopped maintenance or malicious take over). Most people I know even refuse to use password managers because of their complexity - while they enormously underestimate their risks by using one or a few weak passwords written on paper or stored in excel sheets. Some of them feel betrayed after being advised to use TOTP 2FA - which is not phishing resistant, effectively *is* a password manager, too often without backups (of the shared secrets) being made, leading to account lockout after losing their phones (or app malfunction). And I'm not even considering privacy invasive and insecure TOTP apps such as Authy. Nobody warned them of risks associated with TOTP, as nobody warns them for the risks that come with passkeys. People are, IMO, righfully not interested in the crap the industry is trying to enforce on them. @rmondello@hachyderm.io @brandonbutler@mastodon.social #Passkeys #AccountLockout #Authentication #TOTP #Authy
-
@WeirdWriter@caneandable.social 2026-05-15 14:39
@jtb@toot.wales @ErikvanStraten@todon.nl @rmondello@hachyderm.io @brandonbutler@mastodon.social Also https://sightlessscribbles.com/posts/how-to-make-portable-passkeys/