Hacker News Reader

Comment by eli | Hacker News Reader

Android syncs them to your Google account and iPhone to your iCloud account by default. Which isn't a perfect solution but, again, is pretty good for most people.

View on HN

And I just found out recently that you can't log into Google on a desktop without responding to a prompt on your Android phone. Which, if you broke said phone, you can't do.

This is without 2fa enabled on my Google account.

There are a few alternate options like email or sms (I've used them several times, you have no option if you erase your only actively-used phone occasionally), but yeah. Google effectively forces 2FA whether you like it or not.

I don't think this is correct

And that's great, as long as you're totally cool with access to _any_ of your accounts _anywhere_ being completely controlled by either Apple or Google.

I was just correcting the parent post that implied the passkeys were only stored on the device. Personally I do not use that feature.

I'm also pretty sure I don't have any accounts that can ONLY be accessed via passkey.

Have you ever been locked out of your Apple account?

Maybe because your kid was playing with your phone and kept entering the wrong passcode and now you’re locked out for several hours?

Or because Apple detests anyone else touching your phone and you’re traveling internationally and your screen cracked and you took it to a local repair shop which in the process of replacing the screen triggered something Apple didn’t like and you’re locked out for a decade.

Reply on news.ycombinator.com