Tag
All topics →Everything tagged passkeys.
23 stories, newest first.
Latest
Ten testable predictions for identity and AI security in 2027, from Know Your Agent rules to passkeys at 45% and EU wallet delays, each with a confidence level and a test.
Read the article
Half of US adults have quit a purchase over login trouble. Four guidelines, a friction map and a 20-check scorecard for a login that is safer and easier.
You can work through a full personal security checklist in one weekend if you go in order of impact: accounts, phone number, and devices on Saturday, then credit freezes, a family safe word, data broker opt-outs, and backups on Sunday.
Pick a passwordless method per user group with the selection matrix, then ship it with the four-phase implementation checklist. Here is how to use both, grounded in NIST SP 800-63B-4 and WebAuthn Level 3.
America.gov launched on September 29, 2026 as a single AI front door to federal services, drawing on 29,000 government websites. What it does today, how to use it well, where it falls short, and what other countries should take from it.
Your account is only as secure as its weakest reachable path, and that path is usually recovery. A ranked guide to recovery methods, the NIST-backed design rules, and the help desk vector behind MGM, TfL and M&S.
More than 20 Pass-the-Passkey techniques abuse logging, session handling, and synced-key recovery. None break FIDO2. Do not freeze the rollout.
A decision framework for enterprise passkeys: when device-bound hardware keys beat synced passkeys, mapped to user risk, device context, compliance, and total cost. Includes the three failure patterns that surface only after rollout.
WebAuthn Level 3 became a W3C Recommendation on 25 August 2026. Encryption key derivation, cross-domain credentials, and automatic list syncing are now first-class. Here is what changed.
Passkeys demo better than any login method ever shipped. Most deployments still cannot get anyone to turn them on. Both numbers are true.
Passkeys, post-quantum crypto, silent network authentication, AI behavioral biometrics, and decentralized identity are fusing into one login stack. Here is what it looks like by 2030, and the two moves in 2026 that decide whether you are ready.
I spent ten years engineering, scaling, and defending password-based authentication for a CIAM platform that grew to a billion users.
We cancelled Auth0 over a year ago. Not because it stopped working, but because scaling to 350,000 monthly active users made the pricing model untenable.
The CIAM platform that got you to 1 million users won't get you to 10 million AI agents.
Silent Network Authentication verifies users in 1-4 seconds using SIM cryptography without any user action.
March 2026 marks passwordless tipping point: Microsoft forces passkey migration, regulatory deadlines hit, and adoption surges to 69% of consumers.
87% of enterprises are deploying passkeys. This complete playbook covers architecture decisions, enrollment UX, recovery design, and the deployment
Production authentication patterns for OAuth 2.0, OIDC, JWT, SAML, and WebAuthn, including the build-versus-buy maths and the storage and session decisions that are expensive to reverse later.
Ten passwordless CIAM platforms compared on verified September 2026 pricing and real passkey depth, plus three vendors to drop from an older shortlist.
Passkeys use public-key cryptography, so there is no shared secret for a breach to leak or a phishing page to capture. Passwords are still everywhere. Here is where each one belongs in 2026.
Passwordless projects fail on enrolment and recovery, not cryptography. A phased checklist from baseline to deprecation, with the metrics that matter.
Synced passkeys for most users, device-bound FIDO2 keys for admins, push as a bridge. The full comparison on security, cost, assurance level and rollout.
One identity behind the scenes, full brand expression in front of it, and consent scoped per brand. The architecture that survives an audit.
