I don't like passkeys

For the past few years, the tech industry has kept pushing passkeys as the ultimate solution to logging in. Many Big Tech companies "helpfully" inform you every time you sign in how much easier and effortless passkeys are. The only way to make them stop is either to concede and set up a passkey or dig into the settings to find the off-switch. Google goes as far as to name the setting "Skip password when possible", and Microsoft advertises that you should make your account passwordless. Passkeys are a fantastic technology. Since they are bound to the site they are created for, they cannot be phished by a hacker's fake login screen. If a site suffers a data breach, passkeys are asymmetric and cannot be recovered from the server-side details. This leads to passkeys being the perfect fit for a corporate environment, but a poor fit for personal security. To an individual, the greatest risks are instead permanent account lockout, automated account bans, and device loss. By using passkeys,…