Tootfinder

While passkeys are an improvement on passwords in security terms, they are not perfect, and there are inevitable trade‑offs in their implementation.
https://www.computing.co.uk/analysis/2026/

Are passkeys ready for the enterprise? A qualified yes
Last week, the UK National Cyber Security Centre (NCSC) issued a recommendation that the default online authentication method for businesses and consumers should be passkeys.

The UK National Cyber Security Centre (NCSC) has advised that passkeys should now be consumer’s first choice for authentication, and that the use of passwords should be gradually phased out.
https://www.

NCSC: Forget passwords, passkeys are the future
The UK National Cyber Security Centre (NCSC) has advised that passkeys should now be consumer’s first choice for authentication, and that the use of passwords ...

@… @… are you planning to support receiving Apple Passwords exports of Passkey into 1Password?

Passkeys Explained: Are They Actually Better Than Passwords? by Addie LaMarr
https://www.youtube.com/watch?v=1nnOvYHwweE

"Pass the key, passwords have passed their sell-by date"
#cybersecurity

Pass the key, passwords have passed their sell-by date
: NCSC passes judgment: passkeys pass muster, passwords fail

RE: https://infosec.exchange/@fob/116790376409526541
I’m somewhat surprised that this is a real experience. Modern password managers, where people mostly store TOTP seeds and even passkeys, are mostly cloud-master models where the end device can safely be fac…

«Phishing durch KI setzt Nutzer zunehmend unter Druck:
Moderne Phishing Angriffe werden durch künstliche Intelligenz immer schwerer erkennbar. Unternehmen und Plattformen reagieren mit neuen Sicherheitsfunktionen.»
Ach guck, die IT-Sicherheit und deren Gefahr durch kriminellen Einsatz der KI und deren Schutz davor, u.a .durch Passkeys, nun auch in den online Boulevard News.
📰

Phishing durch KI setzt Nutzer zunehmend unter Druck
Moderne Phishing Angriffe werden durch künstliche Intelligenz immer schwerer erkennbar. Unternehmen und Plattformen reagieren mit neuen Sicherheitsfunktionen.

I gotta admit that Passkeys have grown on me. I use them with 1Password & the integration even in Apple’s apps is great.
Looks like the worst UX problems have been ironed out and pressing “Login using Passkey” is much nicer than pasting email codes or getting angry that OTP auto-fill doesn’t work.
My main annoyance now is that many sites use it as 2FA and not as a primary login.

Ugh. Downloaded Proton Pass, exported from Bitwarden, imported to Proton and I test it out. First of all, Passkeys aren't included, which is probably to be expected. Secondly, attachments aren't included (as I am trying it out for free), but also not listed so you can tell what wasn't imported. And the fifth site I try to log in was just missing from the vault. Not a *great* first impression. I guess it's time to compare hundreds of items. x_x
Update: I realized the mis…