It sound like this is just not for you then. Yep password managers are not user friendly. Single tap sign in button is. Is it less secure? Probably. You’d still have the option to login regularly.

After all the fediverse is for social media. It should be easy to use for the masses. It also means you won’t be storing your bank info in a fediverse app so the damage is not that bad if someone hacks you. Instagram and tiktok accounts get hacked all the time btw and it’s not the end of the world.

Not a single point but multiple points. Anyway I’m not gonna pretend I’m an expert in security! I just think it’s a feature worth exploring.

I’m guessing it would have to federate with whatever platform decides to implement the single sign on feature. Not sure will leave the details to smarter people haha. Hope some day it could be implemented because it would be pretty useful if it can be done in a secure way.

Right well I guess your concerns also apply to apple sso, google and sso in general. I don’t think it’s something you would use but mainstream users might definitely appreciate the feature.

That looks interesting too, thanks!

I mean a federated authentication server that you can host yourself if you want.

I don’t understand what you mean about using a password manager, you can still do that. Also your identity is tied to a lemmy instance right now anyway.

Your password manager’s login can also get compromised

I agree but I also thought this could solve things like mentioning a user across platforms for example.

I think you’re right. This might be the biggest problem but it doesn’t seem impossible to solve.

I believe it’s actually possible to sign in with mastodon on Pixelfed. Wouldn’t that work for a single user mastodon instance too?

Well right now Pixelfed has a sign in with mastodon button for example. Admittedly, I don’t know the details but I don’t think anything is stopping me from running my own mastodon instance just to sign up for Pixelfed.

I agree it might be a nightmare to manage tho if everyone has their own instance but that would probably not be the case.

Looks pretty cool!

Just like fediverse works you can federate with the auth providers you want and ban malicious ones.

Lots of lemmy instances chose not to federate with others. I imagine it could work the same way.

I imagine the auth provider could be decentralised too