PDA

View Full Version : Passkeys



Tradd
6-28-25, 11:06am
A friend of mine had apparently not secured her Gmail account adequately. Her Gmail account was hacked then they were able to get into her Amazon account, ordering $625 of e-gift cards.

People need to start using passkeys. In fact, Microsoft is now making passkeys the default option instead of passwords.

Passkeys are tied to biometrics on your phone, tablet, or laptop. For phones/tablets, it's going to be FaceID/TouchID, or your passcode. For laptops, fingerprint or PIN.

The important part is that passkeys cannot be hacked. I was getting many password reset attempts on my LinkedIn account from Russia. When I added the passkey, they stopped. If you backup your passkeys to the cloud, in Passwords app for Apple with iCloud keychain or other password app, you don't have to worry if you lose your device or if it bricks (breaks and can't be resurrected).

Many services/websites support passkeys. Apple, Amazon, Google, FB, Microsoft, etc. I use one wherever possible. Still peeved my big bank still uses codes via text for authentication. Can't even use an authentication app as an option.

https://support.microsoft.com/en-us/account-billing/signing-in-with-a-passkey-09a49a86-ca47-406c-8acc-ed0e3c852c6d

iris lilies
6-28-25, 12:58pm
I domnot store digitally passwords for any of my accounts where money can be spent. By this I mean, Amazon, eBay, PayPal, etc..but that said, i’m sure there are all kinds of security problems with my accounts.

For instance, I don’t worry about Facebook much YET I should worry about it because I run hobby group Facebook pages off of my main account, and I would not want that access blocked.

Tradd
6-28-25, 1:29pm
I domnot store digitally passwords for any of my accounts where money can be spent. By this I mean, Amazon, eBay, PayPal, etc..but that said, i’m sure there are all kinds of security problems with my accounts.

For instance, I don’t worry about Facebook much YET I should worry about it because I run hobby group Facebook pages off of my main account, and I would not want that access blocked.

Do you have two factor authentication on your FB account? What about your email account? Email account is a big one since it's the key to so much other stuff.

Tradd
6-28-25, 1:30pm
I domnot store digitally passwords for any of my accounts where money can be spent. By this I mean, Amazon, eBay, PayPal, etc..but that said, i’m sure there are all kinds of security problems with my accounts.

For instance, I don’t worry about Facebook much YET I should worry about it because I run hobby group Facebook pages off of my main account, and I would not want that access blocked.

Do you have two factor authentication on your FB account? What about your email account? Email account is a big one since it's the key to so much other stuff.

What if your house burns down and your written down list of passwords goes poof?

iris lilies
6-28-25, 1:40pm
Do you have two factor authentication on your FB account? What about your email account? Email account is a big one since it's the key to so much other stuff.

What if your house burns down and your written down list of passwords goes poof?

I don’t have two factor authentication on email and that is a problem for sure. I’m not sure that my email service provider offers it, but maybe they do. It’s AT&T.

as for passwords burning down in my house, there’s always a way to get into those accounts. As for any bank account, we walk into the brick and mortar places and get security that way if necessary.

happystuff
6-28-25, 7:39pm
The problem I have run into on email verifications is that email-1 will send a code to email-2, but I can't log into email-2 because it suddenly requires a code from email-1, it is a catch-22 that I haven't been able to work out. And this includes one of the emails having text authorization as well. Something is screwed up somewhere.... sigh.

Tradd
6-28-25, 8:03pm
The problem I have run into on email verifications is that email-1 will send a code to email-2, but I can't log into email-2 because it suddenly requires a code from email-1, it is a catch-22 that I haven't been able to work out. And this includes one of the emails having text authorization as well. Something is screwed up somewhere.... sigh.

Who is your email provider? That is effed up.

happystuff
6-28-25, 9:36pm
Who is your email provider? That is effed up.

Normally, it doesn't happen. Seems to be mainly when I am traveling... away from home. They are two different providers. Have been trying to get text msg verifications for them instead of email. Haven't given up. LOL

bae
6-28-25, 10:13pm
The important part is that passkeys cannot be hacked.

https://imgs.xkcd.com/comics/security.png

happystuff
6-29-25, 11:50am
LOL, bae.

ToomuchStuff
6-29-25, 5:48pm
Bae is accurate. What about desktops? I have no camera or biometric capability on my one Windows 11 desktop. Laptops have no fingerprint reader and cameras are physically shuttered. (work laptops, because others are not willing to learn Linux)
Work phones have nothing to do with Microsoft, and passwords are more pass sentences (long), as an example.
I have no personal phone, as the smart phone I have was bought due to work. I have no Facebook, or Gmail. No biometrics on the phone (which the police can use to log into your phone if not done with number lock).
I haven't even heard properly what a passkey is, and why does a computer think I need a Microsoft account, rather then just a local account. (my computer didn't require it when I got it).
Heck bought before cancer surgery, then after Tim's accident, hadn't been turned on in over a year (98% game machine, non game stuff I run open source software on it).