
Latest
Pass-the-Passkey Bypasses MFA Without Breaking FIDO2
More than 20 Pass-the-Passkey techniques abuse logging, session handling, and synced-key recovery. None break FIDO2. Do not freeze the rollout.
Read the article
Tag
All topics →Everything tagged passkeys.
13 stories, newest first.

Latest
More than 20 Pass-the-Passkey techniques abuse logging, session handling, and synced-key recovery. None break FIDO2. Do not freeze the rollout.
Read the article
A decision framework for enterprise passkeys: when device-bound hardware keys beat synced passkeys, mapped to user risk, device context, compliance, and total cost. Includes the three failure patterns that surface only after rollout.

WebAuthn Level 3 was proposed for W3C Recommendation in July 2026. Encryption key derivation, cross-domain credentials, and automatic list syncing are now first-class. Here is what changed.

Passkeys demo better than any login method ever shipped. Most deployments still cannot get anyone to turn them on. Both numbers are true.

Passkeys, post-quantum crypto, silent network authentication, AI behavioral biometrics, and decentralized identity are fusing into one login stack. Here is what it looks like by 2030, and the two moves in 2026 that decide whether you are ready.

I spent ten years engineering, scaling, and defending password-based authentication for a CIAM platform that grew to a billion users.

We cancelled Auth0 over a year ago. Not because it stopped working, but because scaling to 350,000 monthly active users made the pricing model untenable.

The CIAM platform that got you to 1 million users won't get you to 10 million AI agents.

Silent Network Authentication verifies users in 1-4 seconds using SIM cryptography without any user action.

March 2026 marks passwordless tipping point: Microsoft forces passkey migration, regulatory deadlines hit, and adoption surges to 69% of consumers.

87% of enterprises are deploying passkeys. This complete playbook covers architecture decisions, enrollment UX, recovery design, and the deployment

A comprehensive developer guide to implementing secure authentication in modern applications. Covers OAuth 2.

Explore the evolving landscape of digital security as we delve into the distinctions between passkeys and passwords.