Hacker News Reader

no they aren't, they are asymetric key pairs

They are static pieces of private data that require you to have a password manager. In simpleton terms, the title is accurate.

Absolutely not, because the sensitive part (the private key) is never sent to the website, so unlike a password it cannot be sniffed or leaked or stolen. It will never end up in a data breach or haveibeenpwned.

With this comes a new problem: how do you reset it?

Good point.

From a user perspective, though, the management of it remains, and in many cases, sites are not allowing you to manage your passkeys in your preferred manner. They become harder to back up and transfer.

Can we substitute "password" for all instances of "private key"?

Reply on news.ycombinator.com