Hacker News Reader

I can kind of see it, but you can also just use an authenticator from any manufacturer, or have multiple types that you use? I'm just curious what I'm overlooking.

View on HN

> I've encountered multiple sites that now use authenticatorAttachment options to force you to use a platform bound Passkey. In other words, they force you into Microsoft, Google or Apple. No password manager, no security key, no choices.

https://fy.blackhats.net.au/blog/2025-12-17-yep-passkeys-sti...

and more discussion here: https://news.ycombinator.com/item?id=46301585

Interesting, could you link me to some of those sites so I can investigate?

Reply on news.ycombinator.com