↓ Skip to main content

“What better way to encourage long term entrapment of users then by locking all their credentials into your platform, and even better, credentials that can’t be extracted or exported in any capacity.”

William Brownfy.blackhats.net.au ↗

William Brown wrote the Webauthn library for Rust, and he now says a password manager beats passkeys. Apple Keychain wiped his passkeys three times. Chrome killed a spec extension by never implementing it, and Android won’t even light up a security key when a site asks for passkeys. The man who built the plumbing is telling you to use Bitwarden instead.