Click the "lost password" button. Passkeys aren't magic, they're just a funky password.
replyIf the website didn't implement a "lost password" button then that says a lot more about the website than it says about passkeys.
And then you call them up, and they allow you in after asking some identity questions, and you learn there's no real security.
replyThis is exactly a scenario that worries me. Proponents of passkeys imply you can setup a bunch of passkeys. Evidently that's not always the case.
reply"But that's just a bad implementation, many other sites do it right!"
replyAnd many sites block paste from password managers. Passkeys have so many ways to do them wrong that we're going to see all kinds of new and exciting failure modes that lock you out of your account in the future.
Are you also using HealthEquity for your HSA? I'm the same boat, they're forcing passkeys on me. I can still login using my employer's SSO but I've been putting off setting up the passkey until I have to.
replyyep
replyI think the irony here is missed.
reply