Amapasskeys, ngaphansi kwendawo

Lokho okuhlanganiswa yile vidiyo

• Iphasiwedi idivayisi yakho eyiqambayo futhi engakukhombisi lutho
• Izinombolo ezintathu: ama-passkey ayizigidigidi ezi-5, impumelelo yokungena engu-98%, ukungena kwe-Google okuyisigidigidi esi-1
• 2013 → 2022: ukuthi i-FIDO yabulala kanjani iphasiwedi, kancane kancane
• Umcimbi: i-key pair eyodwa ngesayithi, inselelo, isignesha
• Kungani ubugebengu bokweba imininingwane ebucayi bufayo: isiphequluli sibhala i-origin

Umbhalo obhaliwe ohunyushwe

Kuhunyushwe kusuka ekulandiseni kokuqala kwesiNgisi. Umsindo namazwibela atholakalayo alawulwa yi-YouTube.

Iphasiwedi idivayisi yakho eyiqambayo futhi engakukhombisi lutho

0:00 I-passkey iyiphasiwedi idivayisi yakho eyiqambayo, engakukhombisi lutho, futhi enqaba ukuyinika noma ubani, kuhlanganisa nawe, okuwumsebenzi wonke wezokuphepha futhi, kusukela ngoLwesine, isikhalazo sonke.

Izinombolo ezintathu: ama-passkey ayizigidigidi ezi-5, impumelelo yokungena engu-98%, ukungena kwe-Google okuyisigidigidi esi-1

0:11 Izinombolo ezintathu. I-FIDO Alliance ibala ama-passkey ayizigidigidi ezinhlanu asetshenziswayo. IMicrosoft ikala impumelelo yokungena engamaphesenti angu-98 ngawo, ngokumelene nama-32 amaphasiwedi. Futhi okuthunyelwe okunesihloko esithi Angiwathandi amapasskey kusebenzise usuku lonke phezulu ku-Hacker News ngamazwana angamakhulu ayisithupha. Emizuzwini emithathu: ukuthi avelaphi, ukuthi isiphequluli sakho sisayina ini ngempela, nokuthi kungani okungenakwebiwa nokungenakususwa kuyigama elifanayo. Lona yiThe Daily Diff, ngaphansi kwendawo.

0:36 2013. I-PayPal, i-Lenovo kanye ne-start-up ebizwa nge-Nok Nok bakha i-FIDO

2013 → 2022: ukuthi i-FIDO yabulala kanjani iphasiwedi, kancane kancane

0:41 Alliance ukubulala iphasiwedi. Ngo-2014, i-Google ne-Yubico bathumela i-U2F security key. Ngo-2019, i-WebAuthn yaba indinganiso ye-W3C. Futhi ngo-2022 i-Apple, i-Google ne-Microsoft bayiqamba kabusha amapasskey, ngoba akekho owake wathenga okuthile okubizwa nge-discoverable resident credential.

Umcimbi: i-key pair eyodwa ngesayithi, inselelo, isignesha

0:59 Umcimbi. Lapho ubhalisa idivayisi yakho ikhiqiza i-key pair entsha yalowo sayithi elilodwa. I-public key iya kuseva; i-private key ihlala ku-chip. Lapho ungena iseva ithumela inselelo engahleliwe, idivayisi iyayisayina, futhi iseva ihlola isignesha ngokumelene ne-public key eyigcinile. Alikho imfihlo kuseva engavuza. Ingxenye yobugebengu bokweba imininingwane ebucayi yindawo eyodwa.

Kungani ubugebengu bokweba imininingwane ebucayi bufayo: isiphequluli sibhala i-origin

1:17 Ngaphambi kokuba idivayisi isayine, isiphequluli, hhayi ikhasi, sibhala i-origin yangempela kudatha esayiniwe. I-domain efanayo ithola isignesha ye-domain engalungile, futhi iseva yangempela iyayinqaba. Umsebenzisi angakhohliswa; izibalo azikwazi. Ngakho-ke i-private key ihlala kuphi?

Lapho i-private key ihlala khona: iboshelwe kudivayisi vs ivumelanisiwe

1:30 Okuboshelwe kudivayisi kusho i-security key, lapho ingaphumi khona, futhi i-YubiKey ibamba ikhulu. Okivumelanisiwe kusho i-iCloud Keychain, i-Google Password Manager, 1Password noma i-Bitwarden, lapho ukhiye uhlala ku-end-to-end i-vault efihliwe futhi ilandela i-akhawunti yakho. Isayithi lingasho ukuthi yikuphi kusuka ku-id yemodeli eyishumi nesithupha yebhayithi ebizwa nge-AAGUID, futhi amasayithi amaningi ayakushaya indiva.

Zombili izindaba ziqinisile: ngokushesha, ngamandla, kukhiyiwe

1:51 Ngakho zombili izindaba ziqinisile. Ukungena kusheshe futhi kunamandla, futhi inhlolovo ye-FIDO ithi abathathu kubane kubathengi banayo. Kodwa imfihlo ongeke uyifunde ayikwazi ukwebiwa futhi ayikwazi ukususwa ngasikhathi sinye: lapho ifoni ifa, noma irobhothi likuvimba i-akhawunti yakho ye-Google, yonke i-passkey engaphakathi ihamba nayo. UHawksley ukubiza lokho ngokuthi kufaneleka kahle enkampanini futhi kungafaneleki kahle kumuntu; UNikita Bier ukubiza ngokuthi uthuli lwengqondo olumlingo.

Isilungiselelo: ukushintshaniswa kwezinsalela ze-FIDO (CXF/CXP) nokuma kwayo

2:14 Isilungiselelo sinengama. Ifomethi yokushintshanisa izinsalela ze-FIDO ifinyelele indinganiso ehlongozwayo, futhi i-iOS 26 ne-Android manje zihambisa ama-passkey phakathi kwabaphathi nayo. I-protocol eseceleni kwayo iseyumbhalo osasebenza, iminyaka emibili. Okhiye beHardware abakaze bathunyelwe ngaphandle ngecebo, ngakho isipele esisemthethweni yisibili ukhiye we-hardware, isincomo esinesibhengezo senani.

NgoMsombuluko: okumele ukwenze ngama-akhawunti akho

2:33 Ngakho, ngoMsombuluko. Okokuqala: gcina iphasiwedi kanye nohlelo lokusebenza lokuqinisekisa kuwo wonke i-akhawunti kuze kube yilapho ukuthekelisa kukusebenzela; indlela yokubuyisela ebuthakathaka ukuphepha kwakho kwangempela ukuphepha. Okwesibili: okuboshelwe kudivayisi kusho okhiye ababili ngosuku lokuqala. Okwesithathu, uma wakha ukungena: funa ukhiye ohlala khona, qinisekisa i-origin kuseva, futhi uyeke ukufuna i-passkey kumuntu owayekade eseyisebenzisile. Isinqumo, ngaphansi kwendawo: sidinga ukuhlola.

Isinqumo: IDINGA UKUHLOLWA

2:56 Umcimbi ulethwe. Isikhathi sokuphila siwumbhalo osasebenza. Uma ungathanda ukufunda lokhu kunokuzwa ngikusho, i-diff ifika ebhokisini lakho leposi njalo ekuseni, mahhala ku-the daily diff dot dev, isixhumanisi ngezansi. Futhi yilokho okuhlukile kwanamuhla. NginguNiko ovela ku-Axrisi. Hlanganisa ngokuzibopha.

Imithombo

1. Ethan Hawksley, "I don't like passkeys" (18 Sep 2026) — https://hawksley.dev/blog/i-dont-like-passkeys · HN (616 points)news.ycombinator.com
2. W3C Web Authentication Level 3www.w3.org
3. Trail of Bits, "The cryptography behind passkeys"blog.trailofbits.com
4. FIDO Alliance, "The State of Passkeys 2026" (5 billion passkeys; 90% familiar, 75% enabled; n = 11,000)fidoalliance.org
5. Microsoft, "Convincing a billion users to love passkeys" (98% vs 32% success, 3× faster, 7,000 password attacks/s)www.microsoft.com
6. Google, 1 billion passkey sign-ins across 400 million accounts (May 2024)blog.google
7. FIDO Credential Exchange specs (CXF 1.0 Proposed Standard, CXP Working Draft)fidoalliance.org
8. Android passkey transfer via CXF (heise, Sep 2026)www.heise.de
9. Yubico, YubiKey 5.7: 100 passkeys per keywww.yubico.com
10. William Brown, "Passkeys: A Shattered Dream"fy.blackhats.net.au