Hacker News new | ask | show | jobs
by raw_anon_1111 85 days ago
Passkeys are stored in your Apple Keychain. I don’t think you have to go through 2FA if you use a Passkey with Google.

I can throw my iPhone in the ocean, go to the nearest cell phone store/Apple Store and log into my Apple account and you won’t be able to tell the difference between my old phone and new phone - all apps, data, icon positions, passwords, photos, settings, bookmarks, history, messages etc will be restored

1 comments

I don't really know how Passkeys or Apple Keychain works. But regardless I would think there has to be some other step to go from merely knowing a password to being able to access a cloud account (which includes the Keychain), no?

Are you saying that you can throw your phone in the ocean, have access to no other devices (including a SIM card), obtain a new phone, input your email+password, and reliably have that new phone onboarded? Because it certainly doesn't work that way in Android+GApps land from everything I've experienced - rather there is always a step where at the very least you have to authenticate using another logged-in session or email challenge.

That’s exactly what I’m saying. It’s worked that way since 2011.

If you go into the Apple Store or your carrier, they hand you new phone, you log in to your iCloud account and it asks you which back up you want to use if you have multiple backups. You might these days have to enter your passcode from your old device.

You or they call your carrier or depending on your carrier you can register your e-sim directly from your phone.

Well it's certainly not that way in Android+GApps land, which is why I wrote my original comment.