Home | Notifications | New Note | Local | Federated | Search | Logout
Note Detail
Reply to @filippo@abyssdomain.expert
Shaoyu@shaoyu@mastodon.social (2026-07-22 09:42:29)
@filippo I wonder if it's Ok to ask a basic question, what do passkeys provide in which passwords don't? In principle, it looks like passwords are passwd[:32] and passkeys are passwd[32:]?
---Reply---
Filippo Valsorda@filippo@abyssdomain.expert (2026-07-22 11:36:06)
@shaoyu passkeys can't be phished.
Reply
---Replies---
Shaoyu@shaoyu@mastodon.social (2026-07-22 11:52:34)
@filippo Thanks for the explanation, it would be valuable if there's a more detailed education on why passwd[:32] can be phished, while passwd[32:] is immune