this post was submitted on 14 Oct 2026
132 points (75.0% liked)
Privacy
51480 readers
275 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 7 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Which ones are doing this? Give specific examples of sites that are forcing you to use a specific TOTP or passkey validator.
The kind of lock in I'm thinking of is with e.g. Google, Apple, or Microsoft when they take charge of the passkeys for you.
That's entirely optional and not forced. You can use FOSS password managers that store your passkeys, that can log into all those services.
If you're referring to proprietary password managers (IE like google or apples), then that concern applies equally to all the passwords you're storing with them. So that concern is not specific to passkeys.
I don't disagree with any of that. You and I will be fine, as long as whatever sites we use don't insist on evil-only providers. The trouble I'm thinking of is for average uncritical phone enjoyers who are guided into a flow where they're migrated to using passkeys with whatever propriety junk they're using and end up locked into Matacorp Secure Cloud who now control their access to all their accounts, where once they had a list of passwords written in the back page of their diary.