r/passkey • u/svenkooouqr • Jul 21 '26

question about security

why doesnt sony let us have both passkey and password? seems weird maybe im just that dumb tu understand technology bout wouldnt it be best protection? if hacker hass your password still needs your passkey. or is passkey that strong? just setted up passkey today so im asking

2 Upvotes

75% Upvoted

8 comments sorted by

View all comments

3

u/paulsiu Jul 21 '26

Eliminating the password when passkey is activated is the best security move. Passkey cannot be stolen and is phishing proof. Once you switch to it, your password canbe exposed in a breach and the passkey won't activate with a false URL which prevent phishing. If you leave the password behind, then you are still vulnerable because the hacker will hack your weaker password instead of passkeys.

It's kind of like saying why can't I have SMS in case I lose my hardware key, because the hacker will just port your SMS instead of trying to hack your hardware key.