• 0 Posts
  • 42 Comments
Joined 2 months ago
cake
Cake day: April 9th, 2026

help-circle




  • Gotcha. OK so maybe a little less applicable to some more than others.

    I already use mostly unique passwords (like a random root word(s) with varying numbers and special characters mixed in) for accounts, and only have my mfa app allowed, not email or SMS. My PW & MFA apps have unique PINs. I also have multiple email aliases for those varying accounts and rotate through after they’re sold every so often. Helps cut down on spam A LOT vs manually unsubscribing. Retail sites are especially guilty of selling info IMO.

    Mine might be slightly overkill, and maybe less necessary with passkeys, but I’ll wait until there are goods self-hosted apps for that.


  • unitedwithme@lemmy.todaytoPrivacy@lemmy.mlPasskeys
    link
    fedilink
    arrow-up
    9
    arrow-down
    2
    ·
    edit-2
    3 days ago

    How is passkey better than PW + MFA? Serious question. Everywhere I read online tells me “it’s better” but doesn’t get into the nitty gritty. Also, I don’t use biometrics of face scans on any device.

    Edit: I should add, doesn’t this make online less anonymous/private? Once a site or browser is uniquely identified, couldn’t that be used for better fingerprinting across other sites, hindering anonymity? I feel like data is still going to be extracted or gathered.

    Aren’t they also stored via cookies? What if your authenticated session is stolen via cookies, what then?








  • I use Waterfox which forgets all data on exit, with Privacy Badger and Port Authority extensions with no exclusions.

    So far, no sites really “break”, if anything, they’re a little quicker… reading mode is nice to get passed paywall popups on most sites that want a subscribe.

    If at work, I include the company-provided password manager for all my sites I need. Still works well (unless my post gets attention and companies try to break it)