Passkeys

Printable View

6-28-25, 11:06am
Tradd

Passkeys

A friend of mine had apparently not secured her Gmail account adequately. Her Gmail account was hacked then they were able to get into her Amazon account, ordering $625 of e-gift cards.

People need to start using passkeys. In fact, Microsoft is now making passkeys the default option instead of passwords.

Passkeys are tied to biometrics on your phone, tablet, or laptop. For phones/tablets, it's going to be FaceID/TouchID, or your passcode. For laptops, fingerprint or PIN.

The important part is that passkeys cannot be hacked. I was getting many password reset attempts on my LinkedIn account from Russia. When I added the passkey, they stopped. If you backup your passkeys to the cloud, in Passwords app for Apple with iCloud keychain or other password app, you don't have to worry if you lose your device or if it bricks (breaks and can't be resurrected).

Many services/websites support passkeys. Apple, Amazon, Google, FB, Microsoft, etc. I use one wherever possible. Still peeved my big bank still uses codes via text for authentication. Can't even use an authentication app as an option.

https://support.microsoft.com/en-us/...c-ed0e3c852c6d
6-28-25, 12:58pm
iris lilies

I domnot store digitally passwords for any of my accounts where money can be spent. By this I mean, Amazon, eBay, PayPal, etc..but that said, i’m sure there are all kinds of security problems with my accounts.

For instance, I don’t worry about Facebook much YET I should worry about it because I run hobby group Facebook pages off of my main account, and I would not want that access blocked.
6-28-25, 1:29pm
Tradd

Quote:

Originally Posted by iris lilies

I domnot store digitally passwords for any of my accounts where money can be spent. By this I mean, Amazon, eBay, PayPal, etc..but that said, i’m sure there are all kinds of security problems with my accounts.

For instance, I don’t worry about Facebook much YET I should worry about it because I run hobby group Facebook pages off of my main account, and I would not want that access blocked.

Do you have two factor authentication on your FB account? What about your email account? Email account is a big one since it's the key to so much other stuff.
6-28-25, 1:30pm
Tradd

Quote:

Originally Posted by iris lilies

I domnot store digitally passwords for any of my accounts where money can be spent. By this I mean, Amazon, eBay, PayPal, etc..but that said, i’m sure there are all kinds of security problems with my accounts.

For instance, I don’t worry about Facebook much YET I should worry about it because I run hobby group Facebook pages off of my main account, and I would not want that access blocked.

Do you have two factor authentication on your FB account? What about your email account? Email account is a big one since it's the key to so much other stuff.

What if your house burns down and your written down list of passwords goes poof?
6-28-25, 1:40pm
iris lilies

Quote:

Originally Posted by Tradd

Do you have two factor authentication on your FB account? What about your email account? Email account is a big one since it's the key to so much other stuff.

What if your house burns down and your written down list of passwords goes poof?

I don’t have two factor authentication on email and that is a problem for sure. I’m not sure that my email service provider offers it, but maybe they do. It’s AT&T.

as for passwords burning down in my house, there’s always a way to get into those accounts. As for any bank account, we walk into the brick and mortar places and get security that way if necessary.
6-28-25, 7:39pm
happystuff

The problem I have run into on email verifications is that email-1 will send a code to email-2, but I can't log into email-2 because it suddenly requires a code from email-1, it is a catch-22 that I haven't been able to work out. And this includes one of the emails having text authorization as well. Something is screwed up somewhere.... sigh.
6-28-25, 8:03pm
Tradd

Quote:

Originally Posted by happystuff

The problem I have run into on email verifications is that email-1 will send a code to email-2, but I can't log into email-2 because it suddenly requires a code from email-1, it is a catch-22 that I haven't been able to work out. And this includes one of the emails having text authorization as well. Something is screwed up somewhere.... sigh.

Who is your email provider? That is effed up.
6-28-25, 9:36pm
happystuff

Quote:

Originally Posted by Tradd

Who is your email provider? That is effed up.

Normally, it doesn't happen. Seems to be mainly when I am traveling... away from home. They are two different providers. Have been trying to get text msg verifications for them instead of email. Haven't given up. LOL
6-28-25, 10:13pm
bae

Quote:

Originally Posted by Tradd

The important part is that passkeys cannot be hacked.

https://imgs.xkcd.com/comics/security.png
6-29-25, 11:50am
happystuff

LOL, bae.
6-29-25, 5:48pm
ToomuchStuff

Bae is accurate. What about desktops? I have no camera or biometric capability on my one Windows 11 desktop. Laptops have no fingerprint reader and cameras are physically shuttered. (work laptops, because others are not willing to learn Linux)
Work phones have nothing to do with Microsoft, and passwords are more pass sentences (long), as an example.
I have no personal phone, as the smart phone I have was bought due to work. I have no Facebook, or Gmail. No biometrics on the phone (which the police can use to log into your phone if not done with number lock).
I haven't even heard properly what a passkey is, and why does a computer think I need a Microsoft account, rather then just a local account. (my computer didn't require it when I got it).
Heck bought before cancer surgery, then after Tim's accident, hadn't been turned on in over a year (98% game machine, non game stuff I run open source software on it).