@Walrus By its own success criteria.

In capitalism, the highest number is the winner. The number is all that matters. The number must go up. That is all.

I like using Aegis for two-factor authentication (together with my own password that's separate). You can set it to back up automatically whenever your set of credentials changes, and I have that set to synchronize automatically to my PC so I have a copy even if the smartphone vanishes. Restoring on a fresh install of the app on another Android handset is trivial.

The other stuff, which demands you trust a third-party with your login credentials, I would not touch with a barge pole.

--- [ I mistook passkeys for hardware keys scrol for my comment on actual passkeys not hardware keys ] ---

When using hardwarekeys its best to keep multiple. That way if one is lost you can use the spare.
One you use as your regular and the other one in cold storage.

Or use one of those authentication apps.

Whether its better than passwords depends on your specific use case.
If you're in a space where shoulder surfing is a possibility i'd go for a passkey on a leash. Or if you're at home for convenience.

Passwords are best when used with a passwordmanager like #keepassxc

I personally use a combination. Hardware keys are a dream for #2fa but i still use passwords plenty

--- [ (software)passkeys ] ---

For passkeys i'd wait a bit. Support is still shoddy and inconsistent imo. There are some applications like KeepassXC that have decent support. Altough that doesn't fix the site-side of things.

Personally i'd stay with passwords because #ItJustWorks
Get yourself a password manager

Like @toddz said, In theory they're decent but in practice not really worth the effort

passkeys are better.

The key is to use one of two options:

Physical security keys like Yubikeys.

Or the better option, a password manager that supports passkeys. Bitwarden and Proton Pass work really well but my favorite is Proton Pass. 1Password also works.

This way, even if you lose all your devices ever, you can always get your accounts back on a new computer.

@joeturner thanks for this.

I’m having a hard time with the mystery of the connection between two devices, with an invisible password living somewhere in the mix. My ADHD brain wants to literally see my passwords and have them available in a tactile way.

I use 1Password and 2FA with an authentication app on my phone. My passwords are also 14+ characters with letters, numbers, and characters. So they’re good.

I’m just wondering why it would be of value to move to passkeys knowing that.