accountless

YouTube video by FIDO Alliance Authenticate 2025 Keynote | Ricky Mondello, Apple | Get the Most Out of Passkeys

I’m really proud of this talk and I hope you’ll watch it. I put care in to making it approachable while still delivering my perspective and insights to security professionals. If you don't get the "why" behind passkeys, this talk will help fill that gap. [2/2] www.youtube.com/watch?v=otOb...

I wish @1password.bsky.social would use native autofill on MacOS like they do on iOS. Any idea why they don't? All attempts at reaching out to them about this ends with "we've let our developers know". but this has been requested for years now with no change.

alice:
if you can’t rotate it’s not safe
if you can’t export it’s not yours
if you can’t try before you sign up it’s a ploy
if you can’t use existing account it’s not permissionless

"building crypto-based decentralized social media and nation-state-secure crypto currency have different goals.

Hence, we think it is urgently necessary for crypto-based decentralized social media to branch out into its own wallet vertical and to solve their problems with bespoke solutions."

"For essentially all of crypto-related decentralized social media, over the course of the last 2-3 years, this has meant TAM-constraint growth and zero sum customer acquisition" https://hackmd.io/lhTJUU_mTOaDIQh2Ae5fIw?view

CleanShot 2025-10-14 at 12.19.49@2x.png

https://metadao.fi/projects/avici/fundraise

this is a good product and team. disclosure, i am an advisor, but only b/c the founder and product are sublime. check out the card. check out the overall design. very smooth. kinda like world wallet vibe in terms of simplicity.

Project Wallets land in your Dashboard Quality of life change to manage your thirdweb Projects more easily.

"Kick off transfers or open the funding modal without leaving the page." https://blog.thirdweb.com/changelog/project-wallets-land-in-your-dashboard/

image.png

https://9meters.com/uncategorized/best-hardware-security-keys-2025

image.png

https://silencelaboratories.com/silent-shard

IMG_6263.jpeg

nostr is good too! lots to learn from every approach. one could argue same for mastodon / activity pub

could it be both? hard to escape the casino in crypto — totally annoying — but farcaster has channels and you can find your own comfy cubby hole.

we own our handles and accounts and network and even state-bans can’t stop it. very powerful and liberating for users. doing more w cross posting may help too.

there is one other protocol to look at for this — farcaster. it is tangential but is not a competitor imo.

i think the only way for atproto to succeed is for us to show what apps can do when every app sees every other app's public data, and they share an identity system. no technical or sociological argument is as convincing as seeing seamless interop and the lighthearted competitive landscape it unlocks

It’s possible and common for scam websites to trick people into giving away their password and 2FA code. Passkeys aren’t vulnerable to this kind of attack (the same way that security keys aren’t). If phishing, password reuse, or weak passwords are in the threat model, passkeys provide value.

cc @rmondello.com will yall add extra paw fields? use case is:

some sites want pin and pw; crypto wallets want seed phrase and app password.

also - when a user hovers over the pw in the app, it displays it. not good if accidentally sharing screen or doing some demo. niche case but 1pw doesn’t.

2 weeks without 1password and using apple pw instead:

feels liberating and less windows to battle with as signing in. apple passwords tho lacks multiple secrets per entry, adding files or links to them, and not sure you can link two entries together.

I can’t speak for 1Password, but I strongly suspect that they’re working to ship support for iOS 26’s support for exporting passkeys, passwords, and verification codes between credential manager apps.

Congrats! Lack of migration has been my biggest reason for not adopting. Will 1Password to Passwords migration be offered?

Available on iOS *today* between Apple Passwords, Dashlane, and Bitwarden. There’s more to go here, but it’s happening!

yolo: migrated off 1password fully to apple passwords. i love 1pw but apple and it always fight. native experience is better.

Micro.blog beats Bluesky, Mastodon, and WordPress to adopting passkeys.

unrelated to above but do you think this is related to your recent comments ab pw managers and ios?

it’s brilliant

looks very commercial, might be missing the point ;)

i just run a pi-hole with unbound

pi-hole.net
unbound.docs.nlnetlabs.nl/en/latest/

use tailscale to connect if away
tailscale.com/kb/1114/pi-h...
and add mullvad vpn as exit node
tailscale.com/kb/1258/mull...

fully local self custody ✊

CleanShot 2025-04-08 at 15.14.52@2x.png

CleanShot 2025-04-08 at 15.15.22@2x.png

https://solana.com/docs/tokens/extensions/confidential-transfer

CleanShot 2025-04-07 at 20.08.23@2x.png

riffing

4.png

3