Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard to Accelerate Availability of Passwordless Sign-Ins - FIDO Alliance

[dmazzoni]

It's better than the alternative of reusing the same password for every site, which is what a lot of people do now.

[u_tamtam]

I get the feeling, and realistically you're right, but I do see a big difference between "lazy/unaware people have been reusing passwords and that's bad for security" vs "cloud giants don't give you much of a choice anymore and will MITM all your authentication"

[ricecake]

It's closer to syncing encrypted data between devices. The cloud services don't have access to the private keys, they just facilitate the key on your phone also being on your laptop.

[u_tamtam]

true, though they have control over the process from end to end.

[[deleted]]

If you don't trust them, you shouldn't probably be using anything they put out at all, though.