Hacker News Reader

Comment by LoganDark | Hacker News Reader

Does this only support hardware security keys...? Not exactly what I expected from "no password".

No specific hardware. It requires a password manager that supports passkeys. Password managers include major browsers. I’ve only tested with Chrome, but I’ve created passkeys on Android, an iPad, and a Mac.

There will be some way to authenticate to the password manager. On my iPad, it’s a fingerprint sensor. With Chrome on a Mac, I don’t know where it gets stored (keychain?), but it prompts for your Mac password. That’s not no password but it’s no additional password.

on my firefox it didn't work, just keep asking to connect a security token, with no other option. Firefox 116, Ubuntu 20.04, had an Yubikey in the past, never used passkey.

I think it's asking for the old yubikey, but neither the site nor firefox give me other option or a link about what to do.

My Chromium 114 only allows me to authenticate with a physical security key, or Windows Hello (which then proceeds to also demand a physical security key). Not very user-friendly...

Would prefer if they just accepted my randomly generated 64 character passwords, since I already use a password manager (KeePassXC).

No its just super clunky for anyone not on a Mac using Chrome or Safari. Windows implementation right now is pretty basic, and Firefox hasn't really got theirs right at all either.

Honestly unless you have a security key, or a mac I wouldn't bother right now. Going all in on Passkeys when a significant majority of devices don't fully support it yet is a bit silly.

I could probably have a security key in as little time as it would take to flash one of my $3 Pi Picos. I just don't think it would be a very good idea.

No it doesn't. Firefox has terrible support for Passkeys at the moment. Try using Google Chrome/Edge/Safari/etc.

Chromium 114 here, it only gives me the option to use a physical security key, or Windows Hello (which then proceeds to also demand a physical security key).

Would prefer if they just accepted my randomly generated 64 character passwords, since I already use a password manager (KeePassXC).

I guess? After they get my email verification code I get a physical usb/nfc request - no idea what it's for/does. A "email login" would have been less of a blocker.

Reply on news.ycombinator.com