Summary

GitHub has officially launched its passkeys security feature into general availability, following a two-month beta testing period. Passkeys enable cloud-synced authentication using cryptographic key pairs, allowing users to sign in to websites and apps with their screen-lock PIN, biometrics, or a physical security key. This technology combines the security benefits of passwords and two-factor authentication (2FA) into a single step, simplifying secure access to online services. GitHub’s move aligns with industry efforts, including collaborations between major tech companies like Google, Apple, Microsoft, and the FIDO Alliance, to make passwordless logins a reality across devices, browsers, and operating systems. Passkeys are seen as a significant step in enhancing security in the software supply chain, a vital aspect of the cybersecurity landscape.

      • asudox@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        Windows 11 was going to add native support for passkeys, is that what you’re referring to, perhaps? Because not even the nightly builds of Firefox have passkey support yet.

        • Raisin8659@monyet.ccOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          It works for Google, Adobe, and Github for me, on Firefox; those are all the sites I use that support passkeys. It even works with Firefox on Android 13.

          Do you have Windows hello enabled? You may want to investigate this more.

    • dinckel@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      1 year ago

      Out of all the platforms my password manager suggested, only PayPal refused to work on Firefox. I couldn’t figure out the Microsoft sign-up though Disregard, this is actually Paypal’s fault

    • SirQuackTheDuck@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      Firefox fully supports webauthn, so sites doing feature checks will be fine.

      Sites doing User Agent checks can burn in hell