this post was submitted on 26 Sep 2026
375 points (95.2% liked)
Technology
88256 readers
4754 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
A password manager is better than passkeys in 2026
It's a false dichotomy to have one or the other. I use passkeys as a quicker and more convenient way to log in to some sites, but I still have passwords in my password manager as a fallback.
Some websites prevent you from using a password if you set up a passkey.
Pass keys are horrible.
It seems like what's actually horrible would be those websites' implementation. But yeah, I'm definitely sticking with a manager.
Really depends on what you mean by passkey, since it's actually a fairly vague term for a bundle of technologies.
I don't really care for password manager passkeys; just use a password, all it really does is save you from needing to enter a username in a login flow.
But I'm a big fan of hardware 2fa using non-resident keys ("passkey" lite); I'll use a regular login flow with a password manager, then the 2FA step with a hardware token. Basically bulletproof (ditto if you secure your PW manager with hw 2fa) and painless.
Even pw synced passkeys at least have the benefits of both being phishing resisting + replay protected, as well as being able to use the TPM chip for extra local protection.
Hardware keys are logically simpler though
Some password managers can sync passkeys for you! Bitwarden can handle it
android doesn't allow 3rd party apps to use passkeys nor autofill 2fa consistently. For passkeys, you are forced to use google services for it, or loose access, making it pointless. TOTP codes meanwhile can at least be copied and pasted manually from a password manager.
https://developer.android.com/identity/passkeys/manage-passkeys
Actually not, 3rd party Android apps can act as passkeys providers
With Bitwarden you can even do your own self hosted sync of passkeys
https://bitwarden.com/blog/bitwarden-passkeys-mobile/
Any app where it doesn't work has chosen to not use the right API
It's android version dependent. Only 14 and up support 3rd party providers.
Given the slowness of android version rollouts, this will be an issue for a long time.
I also think supporting older androids is pushing apps to do it the "wrong" way and making it google specific.