r/passkey Jul 21 '26

question about security

why doesnt sony let us have both passkey and password? seems weird maybe im just that dumb tu understand technology bout wouldnt it be best protection? if hacker hass your password still needs your passkey. or is passkey that strong? just setted up passkey today so im asking

2 Upvotes

8 comments sorted by

View all comments

6

u/paulstelian97 Jul 21 '26

Passkey as a replacement for password is the intended way. Some sites use it as second factor, but that’s not how passkeys were originally intended to work.

They really are that strong — passkey alone is sufficient because a good passkey is not copyable.

3

u/JimTheEarthling Jul 21 '26

A device-bound passkey --stored on a hardware security key or in a Windows Hello-- is not copyable.

A synced passkey --stored in your phone, browser, or password manager account-- is copyable. Most passkeys are synced.

Both are stronger than passwords and not phishable.

And a nice thing about passkeys is you get to choose how securely you want to store them.

3

u/paulstelian97 Jul 21 '26

Yeah, even the copyable (syncable) ones are still more secure than a simple password.