Hacker News new | past | comments | ask | show | jobs | submit login

I helped a family member set up an account on a state website which involved also creating an account on id.me. The amount of text message codes and email codes and usernames and passwords was ridiculous and incredibly difficult for them to follow. Passkeys would make it impossible





>Passkeys would make it impossible

This is so incredibly wrong that it makes me think you've never actually experienced signing in with a passkey.

Passkeys would eliminate all the text message codes, email codes, and passwords. The flow is literally just: Face ID or Touch ID (or equivalent on Android/Windows), and you're done. It's both a faster/easier user experience than what you're describing and it's way more secure than any of the things you described, because the resulting credential is domain-bound and therefore can't be phished.


Have you actually tried passkeys there? I find the implementation pretty straightforward to use: I enter a username, password (unfortunately no passwordless passkey support yet), and then click "ok" when prompted to use my passkey by my browser.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: