Passkeys: Convenience vs. Control – A Growing Concern

The shift towards passkeys as a replacement for usernames and passwords, while aiming for enhanced security, presents underlying issues. The attestation system allows websites to gather detailed device information, enabling governments to restrict users to specific hardware authenticators. Interoperability between password managers is limited, creating vendor lock-in. Sneaky auto-enrollment tactics by services subtly bind users to their ecosystems. The author expresses concern over increasing reliance on tech giants and complex systems, potentially leading to restricted data access, heightened authentication complexity, and ultimately, a loss of user agency.