Top all-time · #3522
Ricky Mondello
Personal blog · rmondello.comsecurityprogramming
Ricky Mondello's personal blog at rmondello.com covers security and programming. Since 2012, 21 different Hacker News readers have linked it 30 times, most often “Switching Password Managers in 2026”. It is still writing: the last post was on 2026-09-20, and you can follow it by feed.
Hi, I'm Ricky! I’m a nonbinary person that uses they/them pronouns. I currently live in upstate New York. I’m a software engineer, known for my work on passkeys, password management, and other app/website authentication technologies. I toot frequently, write on this blog occasionally, and speak publ
Most-linked posts?
- Switching Password Managers in 20267 people · 9 mentions · first linked 2026-09-08
- Apple Passwords’ generated strong password format4 people · 4 mentions · first linked 2024-10-08
- Magic Links Have Rough Edges, but Passkeys Can Smooth Them Over3 people · 4 mentions · first linked 2025-01-02
- Ricky Mondello » Twitter’s Decision to Limit SMS 2FA Is Dangerous3 people · 3 mentions · first linked 2023-02-20
- Consider Slowing Down When Switching Password Managers3 people · 3 mentions · first linked 2024-09-23
- Ricky Mondello » Shortcut for Adding Settings > Passwords to Home Screen or Dock3 people · 3 mentions · first linked 2023-01-30
What Hacker News says?
For passkey export, there is a FIDO specification for both a format and secure protocol for exchanging passwords and passkey information between password managers, with support on all Apple platforms, and implemented by 1Password, Bitwarden, Dashlane, and more: https://rmondello.com/2026/09/07/switching-password-managers... https://fidoalliance.org/download-credential-exchange-specif... For the iCloud syncing, I bel…
Comment linking /2026/09/07/switching-password-managers-2026/
on “Passkeys are a trap”Submitted Apple Passwords’ generated strong password format as a story · 436 points
HN discussionExcept that this is not true. There is a FIDO specification for both a format and secure protocol for exchanging passwords and passkey information between password managers, with support on all Apple platforms, and implemented by 1Password, Bitwarden, Dashlane, and more: https://rmondello.com/2026/09/07/switching-password-managers... https://fidoalliance.org/download-credential-exchange-specif...
Comment linking /2026/09/07/switching-password-managers-2026/
on “Passkeys are a trap”Submitted Magic Links Have Rough Edges, but Passkeys Can Smooth Them Over as a story · 50 points
HN discussionI think as Ricky wrote last week [1], they should augment Magic Links or other auth methods. There are some positives about Magic Links for sure (though I don't know if making your email an even stronger attack vector is necessarily one of them), but for people who use a password manager, for example, they are a definite friction point that I think passkeys most certainly could alleviate. There are definite UX probl…
Comment linking /2025/01/02/magic-links-and-passkeys/
on “Magic/tragic email links: don't make them the only option”Submitted Apple Passwords' Generated Strong Password Format as a story · 8 points
HN discussionI think this is really great as a response to 404's post last week. I love 404 but I'm as annoyed by Magic Links as OP for the same reasons they mention. Ricky Mondello wrote a really great blog last week[1] about how passkeys, as OP alludes to at the end, can be used alongside Magic Links, that I think is worth a read. [1]: https://rmondello.com/2025/01/02/magic-links-and-passkeys/
Comment linking /2025/01/02/magic-links-and-passkeys/
on “Magic/tragic email links: don't make them the only option”Submitted Switching Password Managers in 2026 as a story · 6 points
HN discussionThey do have a big list of exceptions for password rules, you can find more details here. Seems they are collaborating with some other password tools, so maybe at some point switching products won’t help? Not sure. Bit Warden seems to make no attempt as this currently: https://rmondello.com/2024/09/29/new-quirks-who-dis/ https://github.com/apple/password-manager-resources/blob/mai... But you can also fix it yourself…
Comment linking /2024/09/29/new-quirks-who-dis/
on “Apple Passwords’ generated strong password format”Submitted Magic Links Have Rough Edges, but Passkeys Can Smooth Them Over as a story · 6 points
HN discussionSomeone linked this on the top https://rmondello.com/passwords-shortcut/ You should be add this to home-screen like an app. Should make it a bit easier open passwords.
Comment linking /passwords-shortcut/
on “Apple Passwords Deserve an App”Submitted Switching Password Managers in 2026 as a story · 4 points
HN discussion+1 Ricky is the best. They also made a very useful Shortcut [1] that offers quick access to the Passwords on your Home Screen or Mac menubar. [1]: https://rmondello.com/passwords-shortcut/
Comment linking /passwords-shortcut/
on “Apple Passwords Deserve an App”Submitted Apple Passwords' Generated Strong Password Format as a story · 4 points
HN discussionRicky Mondello is a principal software engineer at Apple, on the Authentication Experience team, and responsible for the Passwords app and developing the roadmap for passkeys. https://rmondello.com/rmondello-résumé.pdf
Comment linking /rmondello-r%C3%A9sum%C3%A9.pdf
on “Ricky Mondello responds to "Passkeys are a trap. Do not use them."”Submitted Switching Password Managers in 2026 as a story · 3 points
HN discussionMy co-founders Mike ( http://lazerwalker.com ) and Ricky ( http://rmondello.com ) collaborated pretty closely on most of the JS. Usage of .on appears to have been introduced by Ricky in January.
Comment linking /
on “a thread”Submitted Switching Password Managers in 2026 as a story · 3 points
HN discussionSubmitted Switching Password Managers in 2026 as a story · 2 points
HN discussionSubmitted Switching Password Managers in 2026 as a story · 2 points
HN discussionSubmitted Consider Slowing Down When Switching Password Managers as a story · 2 points
HN discussionSubmitted Apple Passwords' Generated Strong Password Format as a story · 2 points
HN discussionSubmitted Twitter’s Decision to Limit SMS 2FA Is Dangerous as a story · 2 points
HN discussionSubmitted Ricky Mondello » Twitter’s Decision to Limit SMS 2FA Is Dangerous as a story · 2 points
HN discussionSubmitted Ricky Mondello » Shortcut for Adding Settings > Passwords to Home Screen or Dock as a story · 2 points
HN discussionSubmitted Switching Password Managers in 2026 as a story · 1 points
HN discussionSubmitted How I'm Doing at the End of 2025 as a story · 1 points
HN discussionSubmitted Twitter's Decision to Limit SMS 2FA Is Dangerous (2023) as a story · 1 points
HN discussionSubmitted Consider Slowing Down When Switching Password Managers as a story · 1 points
HN discussionSubmitted Consider Slowing Down When Switching Password Managers as a story · 1 points
HN discussion
