Passkeys might really kill passwords

Passkeys might really kill passwords | The Vergecast

Рет қаралды 31,898

Күн бұрын

Today on the flagship podcast of video podcasts: The Verge's David Pierce chats with 1Password's Anna Pobletts about good password hygiene, passkeys, and the upsides of a third-party password manager. Victoria Song joins the show to discuss the state of wearables and why this may be the year for the smart ring. Later, David answers a question from The Vergecast Hotline. #Podcast #Technology
Read more: trib.al/HtBK3Nm
0:00 - Intro
01:54 - Passkeys w/ 1Password's Anna Pobletts
30:57 - Wearables w/Victoria Song
56:47 - Vergecast Hotline
Further reading:
1Password rolls out public passkey support to its mobile apps and web extensions: trib.al/MHF6jQ8
Fossil is quitting smartwatches: trib.al/dtkxNbi
This might be the year of the smart ring: trib.al/R7mqdno
Apple Vision Pro review: magic, until it’s not: trib.al/c4DwQwp
Here’s how much the Vision Pro’s accessories cost: trib.al/L2yBANk
Subscribe: goo.gl/G5RXGs
Like The Verge on Facebook: goo.gl/2P1aGc
Follow on Twitter: goo.gl/XTWX61
Follow on Instagram: goo.gl/7ZeLvX
Follow on TikTok: bit.ly/42VeCVU
The Vergecast Podcast: pod.link/430333725
Decoder with Nilay Patel: apple.co/3v29nDc
More about our podcasts: www.theverge.com/podcasts
Read More: www.theverge.com
Community guidelines: bit.ly/2D0hlAv
Wallpapers from The Verge: bit.ly/2xQXYJr
If you buy something from a Verge link, Vox Media may receive a commission without exerting any influence on editorial content. For more information about our ethics policy, visit: bit.ly/3P4bJgz

Пікірлер: 72

@LashanR 3 ай бұрын

It's a good idea to bring the Vergecast to the main channel but this audio-only version doesn't work great for KZfaq. Was enjoying it on Pocketcasts but was a little confused to see this when I tried switching to video here.

@PKdeGallo 3 ай бұрын

Any chance of adding chapters to the Vergecast? I know there’s timestamps but chapters are nice and efficient and would just make listening easier in the car (I like to skip topics I don’t enjoy with my steering controls) (I mean on Podcast players, I know the video here has chapters but apps like Overcast and Apple Podcasts support chapters and The Verge doesn’t add the chapters there)

@orimandel 3 ай бұрын

Either they saw ur comment and added them, or the chapters just don't appear for you, because they do for me. iirc yt sees timestamps and automatically adds the chapters so they should've been there from the beginning.

@PKdeGallo 3 ай бұрын

They had the chapters on the YT vid but if you go to the podcast on say Overcast or Apple Podcasts they don’t do chapters there.

@FranciscoAreasGuimaraes 3 ай бұрын

I want to understand the decision process for this and who thought this was a good idea. You have a video into and you had parts of the Podcast where we can see everyone in their studio talking, this makes sense, this is adding to just listen to each one talking. Why for heavens sake, do a video intro and then, put a static background and continue with audio only. This does not make any sense at all

@Kurioms 3 ай бұрын

It was a nice surprise to see David's face.

@thecunninlynguist 3 ай бұрын

a long time coming. Trying to convert all available sites to passkeys. I'm still a big fan of 2FA though.

@Kysen10 3 ай бұрын

I had no idea the podcasts were on another channel. I just thought it ended years ago.

@nationharris 3 ай бұрын

Crazy that this is the topic of the show, ive been talking about passwords and setting up passkeys with my colleague the last few days

@MaxArthey 3 ай бұрын

Great conversation around passkeys! I'm in the technology industry and was completely baffled by some of the simple aspects around them! Really great questions and answers!

@domramsey 3 ай бұрын

To go from a video intro to no video on a KZfaq video is really strange and jarring. If you're going to post on KZfaq, you really should do the whole thing as video.

@dbsirius 3 ай бұрын

The flaw in passkeys is you're over-reliant on your device. If i lose my phone on my way to work, I can't access anything. Imagine being abroad and being locked out of everything.

@lambgoeswoof 3 ай бұрын

Bingo. They're a good idea, but I wouldn't want to see passwords completely go away for this very reason.

@nathanr5825 3 ай бұрын

Clearly you didn't listen to the entire podcast. Each device you own can have its own passkey. You can have different passkeys on different devices. As long as you can log into your Google, Apple, MS, whatever, you are good to go. And if you lose your device passkeys are recoverable.

@sinokgr 3 ай бұрын

I had exactly that, because my old self thought that it was going to be a great idea to use an Authenticator app for all my MFA and then I lost my phone and in order to get my accounts back I had to contact every company on the planet, and they wanted my passports, ids etc to authenticate me back in. It took me over a month to get all the accounts unlocked. Now I switched to SMS MFA which is technically less safe, but safe enough IMHO.

@rjcc 3 ай бұрын

That's not how it works at all. You should check them out a bit more.

@jjmot27 3 ай бұрын

@@nathanr5825 I did listen to the podcast, and know that the answer wasn’t sufficient. How are you supposed to log into those accounts without your device?

@daultonvenglar9905 3 ай бұрын

Re: sleep tracking with a watch vs ring. When Apple first released sleep tracking on the Apple Watch I gave it a try for a few weeks and I just couldn’t get comfortable with a watch on overnight. Then I got the gen 3 Oura ring and I don’t even think about it anymore because it’s so light and hardly interferes with my day or night.

@thumbtak123 3 ай бұрын

I have the Flipper Zero that is a tool I use in my IT world. One feature it has that is useful is a built-in YubiKey. I use it for my most important accounts.

@chillinJohnny 3 ай бұрын

Can you add timestamps for the last episode

@andrasjuhasz. 3 ай бұрын

Please don't move long-form video podcasts to the same channel as medium-form tech videos. I'd want to keep subscribed.

@techienerd01 3 ай бұрын

Definitely agree on the price, David! I wouldn't pay anymore for a headset than I would a phone. Otherwise I'm going to need a very compelling reason or cool use case to buy it at the price it's at now.

@HenriqueOz 3 ай бұрын

I see that most people are complaining but I like to see the podcast here.

@jamesselene 3 ай бұрын

Do passkeys work with multiple users on the same device, without separate local device accounts (shared iPad, shared computer-single local account).

@bjorn2625 3 ай бұрын

I’ve used passkeys a lot. I don’t think they do. iOS is famously bad at handling multiple users. Mac and Windows require each user to have their own user account for this to work effectively.

@siraaron4462 3 ай бұрын

What price do I think will send headsets mainstream? Sub-400 USD. I think this is a new and experimental form factor that a lot of people are and will continue to be Leary of - especially while goodwill towards apple is beginning to wane and the lay-person's indulgence budget runs dry. But maybe I'm just more frugal than your average consumer.

@rebokfleetfoot 3 ай бұрын

i use what i call a 'personal hash', basically i have a secret hashing algorithm that just crypts the name of the website into a password, not sure what the security community would say about this, but it works for me

@rikspector 3 ай бұрын

Passwords can be in your head, this must have two physical objects

@alanharper23 3 ай бұрын

Passwords being In your head is what makes them 1) susceptible to phishing and 2) difficult to remember lots of complex passwords. One physical object is wherever your passkeys are stored - what’s the other object you mentioned?

@ROBERTDAVis2271 3 ай бұрын

Cool video 👍🏿

@WeAreTheKulture Ай бұрын

Man i wish i called into this show… i own the avp and can present a compelling case of how its worth every penny of the 3500

@kostasmira2933 3 ай бұрын

Passkeys doesnt work in my country yet. Greece. I tap to sign in to my goggle account for example and i choose passkeys but nothing happens.

@bjorn2625 3 ай бұрын

The rollout is so so slow. Many services only support US passkeys … but it is changing, slowly.

@michaelkinsella1559 3 ай бұрын

Hi David, nice face. Ignore the haters. 😂

@imdavidpierce 3 ай бұрын

At this point, it's the only face I got, you know?

@SuperDude69 3 ай бұрын

How about just using an open sourced password manager... No issue if your device is stolen. No need to remember passwords.

@alanharper23 3 ай бұрын

Lots of people do, but not your average user. Password managers can be a lot to set up and maintain, and people simply don’t care or know enough to bother with them.

@thecunninlynguist 2 ай бұрын

I use a password manager, 2FA, security keys, and passkeys.

@EasyEV 3 ай бұрын

I still don't understand how to set up a passkey. I can't listen to all this talk about something that I don't get. I really need an ELI5 here. Where do I go on my iPhone to set this up? What are the requirements and what are the limits?

@sullivan4052 3 ай бұрын

i should buy an old ipod

@itahasin77 3 ай бұрын

👍

@nope8013 3 ай бұрын

I really don’t understand why you put the podcasts here too. I like to have my topics and channels separated. For example the wsj channel is full of uninteresting videos (for me at least) and I always miss Joanas Videos because I don’t want to clog my inbox with the whole wsj Channel. :-/

@Svangen1 3 ай бұрын

Because no one would know it exists

@toshaks 3 ай бұрын

Yeah I found out about this just now.

@cjspyker 3 ай бұрын

50x19x8

@wrmacleod 3 ай бұрын

You should do this, and you can do that, but you should also do this, but if you do that you should also do this other thing, and backups should be made, but in another thing over here .....yup very clear now

@brozz837 3 ай бұрын

@Bitwarden WAKE UP!! where is native device support for passkeys

@joku900 3 ай бұрын

wow

@coy9898 3 ай бұрын

I don’t use one password cause I’m tired of paying a subscription for everything. People will use what free and most convenient

@mr0m30 3 ай бұрын

I will believe passkeys are real when you don’t have to hunt for and click a link on the login page to use them.

@ClaxtonBay123 3 ай бұрын

Where's NILAY?!

@miilotheminer 3 ай бұрын

he’s not on this show, he’s on the friday show

@Sagarmaatha8848 3 ай бұрын

TLDR please

@thecunninlynguist 3 ай бұрын

passkeys are more secure than passwords.

@John-Smith02 3 ай бұрын

And passkeys are coming/the future

@harrymcintosh2940 3 ай бұрын

I've been listening to this for 10 minutes, and you still haven't said anything. Sure, you've repeated over and over that passwords are bad, but you still haven't explained what a passkey is or why it's better. I'm not waiting any longer. I have other things to do that wait for you to get to the point.

@m.e.p.r 3 ай бұрын

Most phones can now track your steps, elevation, acceleration, speed and live location...which is more than enough for most people (easily enough for me) and barely touches your battery. I use my iPhone for steps and a £60 fitness Polar band for sport and that's it. If you are tracking sleep, you are a loser lol :)

@KrunoslavStifter 3 ай бұрын

"for your safety" argument never is what it says, its just corporate double speak. Thanks, but no thanks.

@alanharper23 3 ай бұрын

Passkeys are more secure though if that's what you're uncertain about. They're easier to setup and use, and their security doesn't rely so heavily on the user.

@KrunoslavStifter 3 ай бұрын

@@alanharper23 The iron law is simple. Convenience vs security. The more convenient something is the less secure it tends to be and the more secure something is the less convenient something is. And when you add some corporation and goverment trying to sell it as "for your safety" your first instinct should be to not walk away, but to freaking run the other way.

@alanharper23 3 ай бұрын

@@KrunoslavStifter While it might be a simple model for imagining security trade-offs, it's not an absolute rule. For instance, it's true when considering different passwords; those that are more complex are more secure, but are necessarily less convenient because they're harder to remember. But passkeys are an entirely different system. They are indeed more secure than passwords, while also being more convenient in the sense that there's nothing to remember. If there's a downside, it's their relatively low adoption because it's such a new standard. But we can expect this to change over time. Users are incentivised to create them because of the security/convenience benefits, and services are incentivised to adopt them because they result in a simpler signup process for their users.