Passkeys Vs Passwords & MFA - Weighing the Pros and Cons!

This episode is sponsored by Yubico!

LINKS:

FTC: Links marked with * are affiliate links, which means I make a small commission off any sales.

Becoming a Morse Code Member by checking out the perks linked here!:

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

SUPPORT MY WORK

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

FOLLOW THE SOCIALS THINGS

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

TECH I USE AND RECOMMEND

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

MY OTHER SHOWS

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

GET IN TOUCH
Mail ✈

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

😍 FTC DISCLAIMER 😍
Affiliate links listed above allow me to receive a small commission. Any sponsorships for videos are noted in video and listed in descriptions. Any products provided as gifts are listed above. Thank you for your support!

Comment section code of conduct policy:
Constructive feedback is appreciated, but please leave unproductive, divisive and harmful conversation at the door. Hateful comments are not tolerated, and these kinds of messages will be automatically removed. Thank you for making this community a welcoming experience for all viewers :)

[VeronicaExplains]

Sending this video to my customers the next time one of them asks me about passkeys. What a great comparison, thanks for making it!

[jmr]

Here's why I think passkey could potentially be better. A smooth passkey experience could mean easier login. Then logging out at the end of each session instead of "remember me" would mean no valid auth token that can be stolen between sessions. Stolen auth tokens is the primary weakness of hardware MFA.

[mrjvjxt]

I'm currently in the 'both' camp, but very much looking forward to passkeys being everywhere. Great video!!

[rpm]

I appreciate the presentation, Shannon. I do think that Passkeys become more ubiquitous, I will stick with a password manager, complex long passwords, 2FA wherever possible, and different passwords for every site.

[SeanSturgess]

Thanks Shannon, great explanation of the pros/cons. I started using a passkey last month, very convenient to use, once I got the first set up done.

[andynl]

Local KeePass & 2FA via TOTP integrated to Firefox & delete cookies after closing tabs works like a charm.

[terrydunlap]

Thanks for sharing the pros and cons. I just ordered 2 yubikeys and will try out passkeys. As head of our IT dept, it behooves me to be aware of all options to be able to enable end users to best protect themselves.

[Zelousfear]

Awesome video Shannon, thank you, shared this everywhere!

[realityos]

Great video! 

Something to consider: I recently had a crash during holidays and had iCloud secured with hardware keys. I had the hardware key, but macOS (admittedly beta) crashed every time in recovery mode when checking the hardware key, so eventually lost all the data on FileVault. So be better than me and consider all points of failure and don't use half-popular authentication methods.

[frankhalstead]

This is about the third time I've looked at pass keys and you've a great job. Thanks. For myself, at this point, I feel passwords generated by password manager and stored by the same are the way to go. Passkeys are attractive but still to new and I can see them being a slow down as one site may use but another may not. I'll keep your product in mind.

[jeffhale]

Thanks for sharing. I appreciate your knowledge. I enjoy learning from your content. Blessings on your day!

[overwatchchannel]

This is the best video on Passkeys, thank you!

[garynagle]

Excellent information. I’m more old school with passwords. Uniqueness is something I definitely need to work on

[macbitz]

Interesting video but what is not clear is how passkeys on a phone are protected? I assume once a criminal gains access to your phone (e.g. by guessing a 4 digit PIN) then they can use all the passkeys stored on it, because those keys are automatically presented to any challenge? Using a complex unique password stored in a password manager plus a 2FA key generated by an authenticator app seems to me to be more secure because then the criminal has to break in to not only my phone, but my password protected password manager app AND my password protected 2FA key generating app. There's a saying in IT that the more convenient a security system is, the less secure it is.

[krismueller]

When I started playing with my YubiKey I got from your link I think ideally, I'd still use another authentication method.
I'd love a world were more companies got on board with the Biometric one, I saw that the one without had more compatibility across sites, so I went without it. I'd love to have a YubiKey, with Biometric, and then still be asked for a PIN, Microsoft Hello, a notification push, or something (the push notification doesn't work when I'm in office.) I'm all on board for making passwords disappear.

[Knards]

I use my phone to check the weather, but I do use Yubikeys on both my computers. Dont leave home without it. Where did you find those stickers you put on your keys?

[zenfishbike]

Totally confused about how a backup key can be kept current when it is located in a safe deposit box and I am using the main key to create passwords on new websites frequently. So if you need both keys onsite at all times in order to have them both current then you've lost the advantage of having a backup safely tucked away. What am I missing here?

[DennisBolanos]

Hey Shannon, can a flash drive be used as a passkey? I’m eyeballing the Kanguru KDBE30-128G biometric flash drive as a potenial passkey device. 💻🔑🛡

[rotary]

Device based security (such as your phone or computer) adds another layer to software based authentication. Services are increasingly combining this in their authentication systems.

The risk that quantum computing represents to authentication cryptography is also important to understand. Encrypted data is being stored now until quantum computing advances sufficiently to easily decrypt it.

[whatsthediehlman]

Thanks a lot for your tutorials on here been watching you since your infancy on tech. Peace!