• someone [comrade/them, they/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    10
    ·
    11 months ago

    Because it’s just a glorified password manager. But instead of your master password being kept securely in your head, your master password is now in the hands of Google or Apple or Microsoft.

    • blobjim [he/him]@hexbear.net
      link
      fedilink
      English
      arrow-up
      10
      ·
      edit-2
      11 months ago

      KeePassXC just today released support for storing passkeys in your own keepass database file. And they’re not just “glorified passwords”. They’re private keys that use challenge-response authentication so they’re never actually sent over the network. Harder to compromise.

      Using passkeys with some kind of personal database is ultimately an objective improvement over hodge podge username and password mechanisms, so they’re only going to continue being adopted further.

      The only case they don’t really work for is when you want to log in to a computer that doesn’t have access to your passkeys.

      • oregoncom [he/him]@hexbear.net
        link
        fedilink
        English
        arrow-up
        5
        ·
        11 months ago

        Cool totally gonna trust some proprietary bazinga program to not leak it like bitlocker or whatever password manager people were constantly shilling last time did.

              • oregoncom [he/him]@hexbear.net
                link
                fedilink
                English
                arrow-up
                2
                ·
                11 months ago

                You don’t actually use your brain lmao.

                Are you so bazinga-brained that you can’t imagine somebody simply remembering what their own passwords are???

                bazinga

                • blobjim [he/him]@hexbear.net
                  link
                  fedilink
                  English
                  arrow-up
                  8
                  ·
                  11 months ago

                  My password database has over 300 credentials. I think most people have more credentials for things (online accounts, also physical locks, device passwords, etc.) than they can remember.

                  • oregoncom [he/him]@hexbear.net
                    link
                    fedilink
                    English
                    arrow-up
                    1
                    ·
                    edit-2
                    11 months ago

                    I’m sorry I touch grass so I don’t have 300 accounts. I would tell you to log off and touch grass but logging back in is probably a 20 step process involving 5 online services for you.

                • RyanGosling [none/use name]@hexbear.net
                  link
                  fedilink
                  English
                  arrow-up
                  8
                  ·
                  edit-2
                  11 months ago

                  I’m sure tens of millions of people said that before being breached and having their password “John1974Smith” leaked. Maybe don’t say anything if you don’t understand basic security protocols and technology.

                  The average person is not a special boy like you. You’re literally in a post showcasing what the average person is like with their information. Security is meant to protect against those people.

                  • oregoncom [he/him]@hexbear.net
                    link
                    fedilink
                    English
                    arrow-up
                    1
                    ·
                    edit-2
                    11 months ago

                    Real “you’ve never taken econ 101” energy you have lmao. Everyone knows that the most secure way to keep track of your accounts is to make sure to store every single one of them online so that anyone who has your one super duper secret password (stronger than all other passwords so it’ll never be hacked obviously) gets access to all of them.

                    That’s not a hypothetical btw, it’s already happened with lastpass https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/