● Covered by 1 source · 1 reportLow impact1 negative
Passkeys Criticized for Lack of User Control and Potential for Vendor Lock-in
Key points
- Passkeys offer less user control compared to passwords or security keys.
- Websites can restrict user actions with passkeys over time.
- FIDO Alliance, passkey developer, lacks consumer advocacy members.
- Various FIDO members have differing interests, not always aligned with users.
The Illusion of Control with Passkeys
While passkeys are promoted as more secure and convenient than passwords, a key concern raised is the lack of ultimate user control. Unlike passwords, which can be managed by the user, or authenticator apps and physical security keys, which offer interchangeability and transferability, passkeys introduce a dynamic where websites can gradually limit a user's ability to manage their credentials.
The FIDO Alliance and Its Members
Passkeys were developed by the FIDO Alliance, a consortium comprising various entities including major tech companies, smaller tech firms, national governments, intelligence agencies, banks, public institutions, and some non-profits. Each member organization has its own motivations, which may not always align with user interests. Notably, consumer advocacy groups are not members of the FIDO Alliance, a contrast to organizations like the World Wide Web Consortium (W3C) which includes public interest groups and academics.
Potential for Restricted User Autonomy
The core argument is that the design of passkeys allows websites to implement restrictions on how users interact with their login credentials. This differs from traditional methods where users retain more direct control over their authentication factors. The article suggests this hidden mechanism could lead to a gradual erosion of user freedom regarding their digital identities.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub dmang-dev/totp-gbReporting from
An opinion piece argues that passkeys, despite their security and convenience, are problematic because users lack ultimate control over them, unlike other login credentials. The author suggests that passkeys allow websites to gradually restrict user autonomy, highlighting that the FIDO Alliance, which developed passkeys, lacks consumer advocacy group representation.