[ghancock]

I want to be enthusiastic about this technology and at first I was, but it's getting harder. I tried to set up passkeys with the sites listed here that I already have accounts on. Results:

1. PayPal: I could not find an option to do it on either a phone or a web browser even after reading the linked instructions. Perhaps it thinks neither device is compatible (they are).

2. Microsoft: After eventually I found an option inside its settings to go "Passwordless" which sounds right, it instead tries to ram an app called Microsoft Authenticator down my throat. On passkeys.directory I check the instructions for insight and I see it says "All you’ll need is a device running Windows 11 and the Microsoft Edge browser." So much for cross-platform standards. If I had been using Windows 11, I assume I would have still needed my password to log in on my phone or anywhere else.

3. Kayak: Works fine, although the log in option is not as discoverable as it could be (I had to click to log in via email, and then click in the email field, and then an option appeared).

4. Shop Pay: Works fine, the only one about which I have no complaints.

[ghancock]

Update: I decided to go back and look at the settings pages for the two that worked.

Kayak shows a "Set up passkey" button with no indication that I already have one or any apparent way to revoke the existing one. Very bad.

Shop Pay does clearly show what passkeys exist, and allows revocation and addition. However, when I try to add one on Chrome on macOS, it only lets me set up a Chrome passkey. (These don't sync between devices. It should have let me set up whatever kind I wanted.) Also, the list just indicates passkeys by what browser type last used them, like "Chrome on macOS." So according to the list I have two passkeys that are just described as "Chrome on macOS" and they are indistinguishable.

I can't imagine recommending anyone try this unless they are consciously an early adopter.

[TheNewsIsHere]

Your points are all excellent examples of how far Passkeys have to go before they’re useful and usable for the masses.

They are cross-platform, but I’ve noticed that the platform makers want so strongly to keep you within their various gardens, that using them across ecosystems isn’t very intuitive or obvious unless you experiment or already know. That’s not a great way to foster mass adoption.

I’m using them everywhere I can and that make sense, but I’m tracking their use very closely in my password manager.