> passkeys, the modern way to handle login that gets rid of password resets entirely
Doesn't that just trade password resets for passkey resets? Or do they permanently lock out users who lose their passkey?
Doesn't that just trade password resets for passkey resets? Or do they permanently lock out users who lose their passkey?
> Passkeys don't have to be remembered
Because you need an app for the login flow. You also don't have to remember passwords if you use a password manager app.
> don't need 2FA
Not true, a second factor in the form of eg a biometric ID or PIN is mandatory.
Phishing resistance exists, but only truly so if you completely surrender control over your device and access to your credentials. Something that the same organizations who you'll depend on for Passkeys are actively pushing for through various initiatives.