Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by re | Hacker News Reader

Parent Full thread

re·

> It's tied to vendor lock in

If you're referring to the inability to transfer passkeys across systems, that should be improving soon.

https://blog.1password.com/fido-alliance-import-export-passk...

https://arstechnica.com/security/2025/06/apple-previews-new-...

View on HN

As long as the passkey spec includes remote snitching (attestation) your keepass open source alternative will exist only because big tech allows it, and it will end when big tech demands it. The entire import/export standard is a red herring.

On one side of the pond, we have the EU's Digital Markets Act to protect consumers. It has teeth and it's already being used to ensure consumers have choice.

But only in the EU. You can already see iOS behave differently depending on which side of the pond you're from.

Not so sure that EU bureaucrats will understand and fix that problem. With NIS2, they let the IT-security-crapware lobby dictate draconian and mostly stupid security laws. Could be that the security-paranoid part of the bureaucracy overrides the consumer protection part in that case.

It's sort of happening already. Members of FIDO threatening to block KeepassXC users [0] from logging in, unless KeepassXC complies with FIDO demands regarding specific implementation

[0] https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

> that should be improving soon

Then _soon_ I might reconsider using passkeys.

I'm not making changes to my security workflows now based on promises that the lock-in potential will be reduced as some unspecific point in the future.

Reply on news.ycombinator.com