Passkey in the form of physical key like Yubikey and similar are much more secure than password + SMS or even TOTP (against phishing attacks) and quite easy to use : insert the key in a USB port or touch with NFC, enter a pin, touch the key (or NFC again) and done.
You can enroll multiple key to have a key on your keyring, a backup key at home or even give access to a colleague or family member with their key.
It's also quite private as site 1 cannot tell that you use the same key as site 2 even if they collaborate on it.
The problem is, nobody want to pay 15-50€ for such physical keys and now enter on device passkey, tighted to your phone or PC and biometric data. And yes this is "free" to use but it's much more locked down and quite bad from a privacy point of view as Google, Apple or Microsoft knows all the websites you enroll a passkey with. Not sure they exploit that (yet) but the possibility is already too much.
Also as mention in the article, it's much harder to share. Maybe you can add multiple device as well but it's not really advertised and sometimes prevented.
I don't know it well enough but I feels that something is shaddy and to be honest it's not an improvement from passwords + TOTP from a UX point of view.
Eluc
npub1ea…x54mw
2026-10-13 10:03:15 UTC
in reply to nevent1q…m4gr
Author Public Key
npub1eaadqhuwn80gatdml02u58q0nd65nx7wqur5je4jwa5gef0p6unqrx54mwPublished at
2026-10-13 10:03:15 UTCEvent JSON
{
"id": "000007ea89fbaab1938595e5210d9201d96fefdaf1c58ac4eb46042192f1bae4",
"pubkey": "cf7ad05f8e99de8eadbbfbd5ca1c0f9b75499bce07074966b277688ca5e1d726",
"created_at": 1791885795,
"kind": 1,
"tags": [
[
"e",
"7362c6f511b45001322c5f19745c26d46d14bd01285382253bead48e06fa0106",
"wss://relay.damus.io/",
"root",
"1e67de3754171071d3cf9b44b6e546bd94fd0a2ca3fb4dbbb1b054685c9116e4"
],
[
"p",
"1e67de3754171071d3cf9b44b6e546bd94fd0a2ca3fb4dbbb1b054685c9116e4",
"wss://nos.lol/"
],
[
"client",
"Amethyst"
],
[
"nonce",
"200dX[",
"21"
]
],
"content": "Passkey in the form of physical key like Yubikey and similar are much more secure than password + SMS or even TOTP (against phishing attacks) and quite easy to use : insert the key in a USB port or touch with NFC, enter a pin, touch the key (or NFC again) and done.\nYou can enroll multiple key to have a key on your keyring, a backup key at home or even give access to a colleague or family member with their key.\nIt's also quite private as site 1 cannot tell that you use the same key as site 2 even if they collaborate on it.\n\nThe problem is, nobody want to pay 15-50€ for such physical keys and now enter on device passkey, tighted to your phone or PC and biometric data. And yes this is \"free\" to use but it's much more locked down and quite bad from a privacy point of view as Google, Apple or Microsoft knows all the websites you enroll a passkey with. Not sure they exploit that (yet) but the possibility is already too much.\nAlso as mention in the article, it's much harder to share. Maybe you can add multiple device as well but it's not really advertised and sometimes prevented.\n\nI don't know it well enough but I feels that something is shaddy and to be honest it's not an improvement from passwords + TOTP from a UX point of view.",
"sig": "3eb5316c03dce33d6bfa9846b4d8d515eacc3edf768ba0f6f6dd8f3baf67cc96ce756e2d86e454894205194000c25c23aa1bcab402da6d615d9c10a89740fa4c"
}