Hacker News new | ask | show | jobs
by paulryanrogers 1270 days ago
Passwordless systems are shitty in all kinds of ways: difficult for users to understand, must have multiple hardware tokens, rely on 3P (who likely needs a password anyway), lock in to one vendor, difficult to recover from lost device, sometimes uses derived values--putting all past and future values at risk.

They'll have an answer for every critique, but they're usually weak responses that assume tech literate users.