9 ms·

Apple's keychain or google password manager - can hold 2000 passkeys easily.

Petersipoi 2mo ago
Did you not read the comment thread you're responding to?
blochist 2mo ago
Nothing in the post you're replying to is about "is 2000 passkeys storable", it's about "if I have 2000 passkeys and I need to move between an Apple device and an Android device, do I need to establish a second set of 2000 passkeys"?
- nightski 2mo ago
  No you don't. I use the same passkeys for all my devices sync'd with bitwarden.
  - crote 2mo ago
    Exactly. Bitwarden, not the Apple/Google/Microsoft keychain. That's the problem.
- ilchalpenl 2mo ago
  Not at the moment. But if you sign into google account in iPhone then you can use Google's passkeys in iPhone. At the end, passkeys are built not for the tin-foil, (I hate Google Apple fellows), I want to keep every single locally, RMS fans. No. A majority will benefit. End of matter. A majority don't change platforms (I have not seen them do it). And lets be honest - even if they were portable are you privacy person that is going to do it? No.
  - TeMPOraL 2mo ago
    No, the majority will not. If through some miracles, passkeys gain sudden and wide adoption, there will be a day of reckoning come around the next mobile refreshment cycle, maybe earlier. People break their phones. That is normal experience. Entirely unsupported by passkeys as they are today. I'm actually surprised we didn't have more pushback for ubiquitous 2FA, as they have similar threat profile - i.e. addressing the tin-foil threats of cybersecurity aficionados, while entirely ignoring the common threats to real people, in particular the one of broken or lost mobile device.
    - coffe2mug 2mo ago
      Incorrect. They break but they fix it. People break their phones less often compared to telling them keep their keepassdatabase in sync across devices. Even recently my friend fixed his iPhone XR (10 year old) 3rd party. Everything including passkeys work fine.
chews 2mo ago
Dunno why the downvotes, if you're willing to trust Apple or Google this is a good method for passkey usage. because your touchID/faceid/opticalid auth gate the keyring's on either of these vendors your passkey works without having to migrate them. EDIT: Also ANY device that you add to your iCloud has access to the passkeys you've made... it's a dream for secure access.
- fugalfervor 2mo ago
  The downvotes are because the commenter did not read or at least did not fully comprehend the meaning of the post they were responding to.
- dotancohen 2mo ago
  What happens when the user decides to move to an Android device, or even is suspended from Apple for a suspected breach of the terms of service, or Apple decides to not support their country anymore? There are countless reasons to prefer to manage one's own access.
  - ilchalpenl 2mo ago
    True... Theoretically correct but in practical sense? All these doom mongering of suspension happens so rarely that majority don't care. There are countless reason to DIY. Agree. But passkeys will help the majority. Also note that the kind of people - like journalists etc - that need to use DIY/local are the ones that are likely to use passkey. Reality.
- ilchalpenl 2mo ago
  Downvotes does not matter. People here that are privacy inclined always find ways to argue about Google or Apple (any major companies). But if you look at their private lives - they adopt tech ASAP. A majority have Apple Pay or Google Pay. Paypal. At the same time use bitwarden also. (And that is fine) These privacy zealots fail to realise that majority of population does not have time to setup bitwarden server or lineageos or zfs storage etc.

Did you not read the comment thread you're responding to?

Nothing in the post you're replying to is about "is 2000 passkeys storable", it's about "if I have 2000 passkeys and I need to move between an Apple device and an Android device, do I need to establish a second set of 2000 passkeys"?

nightski 2mo ago
No you don't. I use the same passkeys for all my devices sync'd with bitwarden.
- crote 2mo ago
  Exactly. Bitwarden, not the Apple/Google/Microsoft keychain. That's the problem.
ilchalpenl 2mo ago
Not at the moment. But if you sign into google account in iPhone then you can use Google's passkeys in iPhone. At the end, passkeys are built not for the tin-foil, (I hate Google Apple fellows), I want to keep every single locally, RMS fans. No. A majority will benefit. End of matter. A majority don't change platforms (I have not seen them do it). And lets be honest - even if they were portable are you privacy person that is going to do it? No.
- TeMPOraL 2mo ago
  No, the majority will not. If through some miracles, passkeys gain sudden and wide adoption, there will be a day of reckoning come around the next mobile refreshment cycle, maybe earlier. People break their phones. That is normal experience. Entirely unsupported by passkeys as they are today. I'm actually surprised we didn't have more pushback for ubiquitous 2FA, as they have similar threat profile - i.e. addressing the tin-foil threats of cybersecurity aficionados, while entirely ignoring the common threats to real people, in particular the one of broken or lost mobile device.
  - coffe2mug 2mo ago
    Incorrect. They break but they fix it. People break their phones less often compared to telling them keep their keepassdatabase in sync across devices. Even recently my friend fixed his iPhone XR (10 year old) 3rd party. Everything including passkeys work fine.

chews 2mo ago

Dunno why the downvotes, if you're willing to trust Apple or Google this is a good method for passkey usage. because your touchID/faceid/opticalid auth gate the keyring's on either of these vendors your passkey works without having to migrate them. EDIT: Also ANY device that you add to your iCloud has access to the passkeys you've made... it's a dream for secure access.

fugalfervor 2mo ago
The downvotes are because the commenter did not read or at least did not fully comprehend the meaning of the post they were responding to.
dotancohen 2mo ago
What happens when the user decides to move to an Android device, or even is suspended from Apple for a suspected breach of the terms of service, or Apple decides to not support their country anymore? There are countless reasons to prefer to manage one's own access.
- ilchalpenl 2mo ago
  True... Theoretically correct but in practical sense? All these doom mongering of suspension happens so rarely that majority don't care. There are countless reason to DIY. Agree. But passkeys will help the majority. Also note that the kind of people - like journalists etc - that need to use DIY/local are the ones that are likely to use passkey. Reality.
ilchalpenl 2mo ago
Downvotes does not matter. People here that are privacy inclined always find ways to argue about Google or Apple (any major companies). But if you look at their private lives - they adopt tech ASAP. A majority have Apple Pay or Google Pay. Paypal. At the same time use bitwarden also. (And that is fine) These privacy zealots fail to realise that majority of population does not have time to setup bitwarden server or lineageos or zfs storage etc.