this post was submitted on 30 Mar 2024
298 points (79.3% liked)

Technology

69912 readers
1960 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

Passkeys are an easy and secure alternative to traditional passwords that can help prevent phishing attacks and make your online experience smoother and safer.

Unfortunately, Big Tech’s rollout of this technology prioritized using passkeys to lock people into their walled gardens over providing universal security for everyone (you have to use their platform, which often does not work across all platforms). And many password managers only support passkeys on specific platforms or provide them with paid plans, meaning you only get to reap passkeys’ security benefits if you can afford them.

They’ve reimagined passkeys, helping them reach their full potential as free, universal, and open-source tech. They have made online privacy and security accessible to everyone, regardless of what device you use or your ability to pay.

I'm still a paying customer of Bitwarden as Proton Pass was up to now still not doing everything, but this may make me re-evaluate using Proton Pass as I'm also a paying customer of Proton Pass. It certainly looks like Proton Pass is advancing at quite a pace, and Proton has already built up a good reputation for private e-mail and an excellent VPN client.

Proton is also the ONLY passkey provider that I've seen allowing you to store, share, and export passkeys just like you can with passwords!

See https://proton.me/blog/proton-pass-passkeys

#technology #passkeys #security #ProtonPass #opensource

(page 3) 50 comments
sorted by: hot top controversial new old
[–] [email protected] 63 points 1 year ago (7 children)

Proton is also the ONLY passkey provider that I've seen allowing you to store, share, and export passkeys just like you can with passwords!

1Password has had this for several months.

As others have mentioned, Bitwarden also has this. This really feels like an ad.

load more comments (7 replies)
[–] [email protected] 1 points 1 year ago (1 children)

I really really like proton pass, was using Google password manager prior but I primarily use Firefox and Firefox's password syncing is just bad. Proton pass has been a surprisingly reliable password manager.

load more comments (1 replies)
[–] [email protected] 40 points 1 year ago (1 children)

This reads achingly like an advert pretenting to be a social media post. BitWarden works fine for third party pass keys on every site I've used it on, ta - and I can self-host it.

[–] [email protected] 1 points 1 year ago

I get "This device does not support passkeys" on Sony Xperia 1 V running android 14

[–] [email protected] 6 points 1 year ago* (last edited 1 year ago) (2 children)

Does it beat Bitwarden though? Bitwardan has supported at least 2 services for me using passkeys ,one of which is google.

I might be misunderstanding this,but it doesn't seem like proton beat anyone to anything.

Edit for info: https://bitwarden.com/passwordless-passkeys/

[–] [email protected] -3 points 1 year ago* (last edited 1 year ago)

The point of the post was that Proton Pass is beating Bitwarden right now to having passkeys for mobile (Bitwarden has still not released that), and Proton Pass can actually export passkeys which Bitwarden does not do, so they are improving. I would not say though they are better all round than Bitwarden. I pay for both but am still evaluating the rest of Proton Pass vs Bitwarden especially around tweaks in options. But Proton is showing some innovation and momentum, while Bitwarden is slowing a bit. For those already using Proton they will likely find Proton Pass good enough to use right now.

[–] [email protected] 10 points 1 year ago (1 children)

They're talking about the fact that Bitwarden doesn't support passkeys on mobile

[–] [email protected] 1 points 1 year ago (1 children)

Right,yeah,that's true for mobile indeed.

Sad that these sort of features are paywalled.

[–] [email protected] 6 points 1 year ago* (last edited 1 year ago) (7 children)

Why shouldn’t these features require money?

It’s $10 per YEAR. This is an extremely reasonable price given the importance of the service.

Bitwarden employees need to eat too.

load more comments (7 replies)
[–] [email protected] 1 points 1 year ago (3 children)

Has anyone used pass keys? I have been hesitant to try them out. Using them, do they basically keep you logged in all the time to a given site?

[–] [email protected] 1 points 1 year ago

Only for a test, I do not see myself switching to passkeys any time soon, using KeePass is fine in my use case. If there would be some site for which I would need to authenticate every day I would probably create a passkey on device itself (Windows Hello or Google Password manager) since authentication speed increase is undeniable.

Only authentication method changes, there should be no difference after you sign-in, how long sign-in is kept still depends on site owner.

There are various sites to test authentication experience, here's one where you can test it with dummy account and no registration https://webauthn.io/. It is pretty cool, but you need to create a passkey for every site on all devices to fully utilize their potential.

load more comments (2 replies)
[–] [email protected] 8 points 1 year ago (2 children)

I don't like passkeys yet because they're implemented poorly on most platforms, IMHO, because they replace two factors with one. Some don't let you also turn on two factor auth at all which is dumb, but the ones that do then often only have options that use your device as a factor either through text or email. So if the passkey is your phone and you add text messages as the 2 factor option, that's still your phone. Or if your passkey is your laptop and you're logged into your email on the laptop, it's just one.

[–] [email protected] 7 points 1 year ago (1 children)
[–] [email protected] 4 points 1 year ago (8 children)

Could either you or @[email protected] explain this for me? If all that's required to log in using a passkey is access to a single device/provider (e.g. Proton Pass in this case) how does it replace 2FA?

load more comments (8 replies)
[–] [email protected] 0 points 1 year ago

I believe passkeys are supposed to replace 2FA and passwords. If you have a passkey, you’re not supposed to need 2FA.

[–] [email protected] 2 points 1 year ago (6 children)

I was considering Proton Unlimited and moving away from separate SimpleLogin and Bitwarden Premium to get my costs down. Has anyone moved from Bitwarden to Proton Pass? How was the experience?

load more comments (6 replies)
[–] [email protected] 40 points 1 year ago (1 children)
load more comments
view more: ‹ prev next ›