Ask HN: Why can I use macOS passkeys without biometrics
Posted by 0xnico 23 hours ago
So this might be a stupid question but i notices that when i use my mac open or with a magic keyboard with a touchID field i get prompted to scan my finger to use a passkey. But whenever i use a secondary monitor and a non touchID keyboard all i need to do is press "continue" in the passkey dialoge.
I get that passkeys are bound to the device and being logged into it is itself some sort of auth it just seems wierd to me to have a security step that is so easy to circumvent that they might as well not ask for my fingerprint at all.
Comments
Comment by theauthkid 19 hours ago
[flagged]