[shaky-carrousel]

I truly don't see the advantage of passkeys over a password manager like bitwarden, with random passwords.

[pibaker]

The main benefit is you will never put your passkey on a phishing site. Password managers provide some protections against it because if they do not work automatically on a website you know something is fishy, but sadly many websites have botched their password input so even with a password manager you may still need to manually copy and paste (or even type, if pasting is disabled) the password.

The problem is whether or not the benefit outweighs the additional risks introduced — losing account access when you lose a device, furthering device lock down, difficulty transferring the passkey between devices, UX degradation due to bad implementation. In my opinion the answer is no and I am sticking with my passwords.

[TurboSkyline]

> sadly many websites have botched their password input so even with a password manager you may still need to manually copy and paste (or even type, if pasting is disabled) the password.

Unfortunately, it’s exactly those websites that I think would be unlikely to support passkeys at all.

[bryantwolf]

The advantage is that the password never leave the device. It has a public key and signs challenges with the private key but nothing sensitive goes over the wire on every login

[valenterry]

It should be noted that that is not an inherential advantage of passkeys over passwords. It is possible to achieve the same with passwords, e.g. by using a hash-cascade.

[brikym]

The benefit is that they aren't phishable.

[red_admiral]

They're more accessible to people who don't understand computer security?

[UltraSane]

The main advantage is how strictly limited export of the passkey secret is. It is very unlikely for it to ever be phished or copied.