Viewing a single comment thread. View all comments

nindustries t1_izrpn2x wrote

They cant steal your passkey and its bound to the real domain name.

1

edvorg t1_izrqv48 wrote

Sorry, could you clarify this bit about a domain name? How does it work?

1

nicuramar t1_izrugs7 wrote

I don’t know what he meant by that. But the passkey only works for that specific login. So in that sense it would be like having 100% unique passwords in all cases.

3

nindustries t1_izrxiu5 wrote

The key that is generated for eg google.com will not be used for fakegoogle.com and there is no way for them spoof it. So your key never leaves your device and only works for the specific, valid website.

1