Join Nostr
2026-10-15 22:33:30 UTC

Ret on Nostr: Lots of passkey debate again. Look. I’ll lay it out nice and simple: I hate them ...

Lots of passkey debate again.

Look. I’ll lay it out nice and simple: I hate them because you keep asking me to use them. I purposely seek out 2FA options when I make a new account somewhere because it’s generally just a “hey, we offer 2FA if you wanna turn it on to keep your account safer”.

eBay asks me EVERY FUCKING TIME I LOG IN to make a passkey. It triggers the browser API to open the annoying fucking UI to do it. It’s a “Ask me Later” not a “Never Ask Again”. Most sites that support passkeys are like this. A few sites I’ve inadvertently ended up with a passkey because of how pervasive the dark patterns are around them.

Fuck off. I don’t want to use them. I don’t trust them. I don’t like the concept of them. They’re opaque and contain a ton of data I don’t know about. Flags that will be used to control my capabilities. Information about my mechanism for storing them that I don’t necessarily want to share with all sites.

When you push something very hard like this, you inherently seem untrustworthy.