Comment by faust201 | Hacker News Reader

Comment by faust201 | Hacker News Reader

Parent Full thread

Then that family member does not worry like you do worry. The main point is assuming one can have a proper security for Google account - everything else becomes easy.

The fearmongering of losing google account should stop. Yes, some people lose it. There are a larger proportion losing/getting pwned by repeat use. For the majority - just pressing the fingerprint to access an account (like amazon/eBay) via passkey is great.

Fairly technical co-workers - I used to suggest them to buy USB security key few years ago. Now that same fairly technical some how has at least 2 devices with them - so they just skipped the USB security key need - and just use Google (in Android) or iPhone in Apple ecosystem. Everything just works.

Yes, there will be a poor soul that may lost everything with only one device.

People keep their entire lives in cloud accounts these days. Their passwords, financial history, copies of important documents, baby photos, etc. Losing access to it is incredibly disruptive and may result in unrecoverable losses.

It shouldn’t be this way, but it is.

At the same time, I know so many people believing DIY raspberrypi based NAS and losing lots of data (thankfully they had cloud backups).

Not everyone has access to server grade hardware.

>Then that family member does not worry like you do worry.

Until they lose access to that account and then it becomes my problem to solve.

This is a different issue. Not everyone has a data engineer - know it all as a family member.

And you need to accept it works for millions.

Working for millions doesn't imply a good hit rate. Google could release a feature that worked 1% of the time and manage that, as well as barely noticing if it wipes out 10% of their users. My actual experience is that almost all the people I know who are using passkeys are using them by mistake and it's only not a big problem because they aren't currently being used up to their promise of preventing the vulnerable authentication methods.

My actual experience is people with passkey are fine. No more account take over. Mote over they like frictionless login.

Yes there are few that used bitwarden and lost everything as their sync using syncthing failed.

Reply on news.ycombinator.com