As you see with the new ReCAPTCHA, Google and Apple love to coerce us into using their proprietary phones and services; remote attestation is a part of it.
Is there a way to use passkeys without "cloud" services (still share them between devices, but without cloud), without having an Android/iOS, without an invasive client on the computer, with GNU/Linux?
Can anyone reccomend a thorough guide to passkey use and best methods of implementation? I am absolutely new to this topic. I can do the reading and follow instructions from them. Is it a consensus here that passkeys are the best option available in May, 2026? This is a big ask. As a 74 yr. old, I offer all the gratitude I have cultivated over the years to you for helping with this.
I was recently compelled to move to passkeys for my HSA account. What's more is that, no, I couldn't use something like a Yubikey. I had to install the company's app on my phone to authenticate.
It's hard to see how it's not clearly obvious that this is how things will go. I have plenty of accounts that I only ever log in to once every six months, using my laptop. The companies behind those accounts are surely besides themselves with glee that now, under the guise of security, they can now require I put their app on my phone, vastly increasing their ability to collect data and bug me.
Why let the user authenticate with a third party manager app or a yubikey when all the corporate incentives point the other way?
Hello world. Do we know when/if reddit will add passkey support?