Skip to content

passkeys

Everything tagged passkeys.

13 stories, newest first.

Latest

passkeys

Pass-the-Passkey Bypasses MFA Without Breaking FIDO2

More than 20 Pass-the-Passkey techniques abuse logging, session handling, and synced-key recovery. None break FIDO2. Do not freeze the rollout.

Read the article
WebAuthn

WebAuthn Level 3: What's New in the Passkey Standard

WebAuthn Level 3 was proposed for W3C Recommendation in July 2026. Encryption key derivation, cross-domain credentials, and automatic list syncing are now first-class. Here is what changed.