Hacker News new | ask | show | jobs
by robertlagrant 6 days ago
> The weird part is that password managers provide no way for you to copy and paste your passkeys.

The main feature of passkeys is that they can't be pasted into a website they shouldn't be pasted in to. That means you can't copy them, by design.
1 comments
Telaneo 6 days ago
They're just text behind the scenes, so you can copy them if you really want to. KeepassX lets you do it, and got into a kerfuffle about it.[1]

It's an impossible design. It's all just obfuscation, most of which is confusing to users.

[1] https://github.com/keepassxreboot/keepassxc/issues/10407

link
robertlagrant 4 days ago
> They're just text behind the scenes, so you can copy them if you really want to. KeepassX lets you do it, and got into a kerfuffle about it.[1]

Yes - the kerfuffle is broadly I think the fact that it negates the main advantage of passkeys: people can't be tricked into pasting them into a fake login screen.

> It's an impossible design. It's all just obfuscation, most of which is confusing to users.

I agree - they're explained in a really odd way, and I think that's because they're a technology with multiple interaction patterns, rather than a single thing like a password. E.g. your fingerprint on your Mac is implemented as a passkey, or clicking on a browser passkey is also a passkey, or using a password manager via a different UI is also a passkey, or touching a Yubikey is also a passkey. The underlying mechanism (passkey) probably has been surfaced more than it should've been.

link