Passkeys are an easy and secure alternative to traditional passwords that can help prevent phishing attacks and make your online experience smoother and safer.

Unfortunately, Big Tech’s rollout of this technology prioritized using passkeys to lock people into their walled gardens over providing universal security for everyone (you have to use their platform, which often does not work across all platforms). And many password managers only support passkeys on specific platforms or provide them with paid plans, meaning you only get to reap passkeys’ security benefits if you can afford them.

They’ve reimagined passkeys, helping them reach their full potential as free, universal, and open-source tech. They have made online privacy and security accessible to everyone, regardless of what device you use or your ability to pay.

I’m still a paying customer of Bitwarden as Proton Pass was up to now still not doing everything, but this may make me re-evaluate using Proton Pass as I’m also a paying customer of Proton Pass. It certainly looks like Proton Pass is advancing at quite a pace, and Proton has already built up a good reputation for private e-mail and an excellent VPN client.

Proton is also the ONLY passkey provider that I’ve seen allowing you to store, share, and export passkeys just like you can with passwords!

See https://proton.me/blog/proton-pass-passkeys

#technology #passkeys #security #ProtonPass #opensource

  • capital@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    edit-2
    7 months ago

    Why shouldn’t these features require money?

    It’s $10 per YEAR. This is an extremely reasonable price given the importance of the service.

    Bitwarden employees need to eat too.

    • lorkano@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      7 months ago

      It’s not paywalled. It’s not yet implemented in mobile bitwarden apps. It probably won’t be paywalled once implemented because it’s not paywalled in extension where it’s already implemented

      • capital@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        5
        ·
        edit-2
        7 months ago

        2FA is a paid feature in Bitwarden. That’s the feature we were talking about.

        Edit: fuck me for explaining myself

        • DesolateMood@lemm.ee
          link
          fedilink
          English
          arrow-up
          1
          ·
          7 months ago

          You’re getting downvoted because that, in fact, isn’t the feature we were talking about.

          2FA and passkeys are different

    • TheEntity@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      7 months ago

      I’d be perfectly okay with them just charging for Bitwarden, period. Instead they pretend it’s free but charge premium for all the most effective security features, including 2FA to their own services. Effectively it creates a group of people that use Bitwarden without access to these security features but complacent enough to not seek alternatives that would offer these features at a price acceptable for them (possibly free, like KeepassXC).

      Bottom line: security shouldn’t be a premium feature. It should be either available or not at all. Never as a premium within the service.

        • TheEntity@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          7 months ago

          I wasn’t aware they added WebAuthn to the free plan recently. That’s great to hear, thanks for the correction!

      • capital@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        7 months ago

        I disagree.

        Simply adopting the use of their free service (or any password manager, sans 2FA) is an upgrade in terms of personal security. That’s moving in the right direction from memorized (and let’s be honest, that means using the same or a small list of similar passwords) passwords everywhere.

        The existence of alternatives that include 2FA at no cost works against your point IMO. But that also comes at a cost - Keepass requires that you manage your own sync and backup.