Browser extension keeps taking over passkeys

[grb]

@Ryan1

better than a Yubikey + short PIN code

You may be interested in the quantitative analysis that I performed in the following thread:

YubiKey Login PSA: Set a strong PIN!

With passkeys becoming more prevalent, and with the ability to store passkeys on hardware security keys (e.g., YubiKeys) for passwordless login, it is imperative to set a strong FIDO2 PIN on your security keys. Otherwise, someone who has stolen or found one of your security keys may be able to brute-force guess the PIN, which would reveal information about what accounts can be accessed with the key (see screenshot below): [image]   Thus, if you are using a security key for passwordless login…