Why passkeys are a step back for personal security: examining account lockout risks, platform lock-in, hardware key limits, and fragile recovery flows.
  • surfrock66@lemmy.worldEnglish
    201·
    14 小时前

    Unless your bitwarden has MFA and locks after an amount of time commensurate with your security needs

    • plateee@piefed.socialEnglish
      6·
      14 小时前

      True, but how does GitHub know your bitwarden has MFA? It only knows something has a valid credential.

      • Natanael@infosec.pubEnglish
        71·
        10 小时前

        Github doesn’t need to know how you implement it, just that your browser is handling it (and in this case the browser lets Bitwarden handle it lol)