
Latest
Pass-the-Passkey Bypasses MFA Without Breaking FIDO2
More than 20 Pass-the-Passkey techniques abuse logging, session handling, and synced-key recovery. None break FIDO2. Do not freeze the rollout.
Read the article
Tag
All topics →Everything tagged WebAuthn.
8 stories, newest first.

Latest
More than 20 Pass-the-Passkey techniques abuse logging, session handling, and synced-key recovery. None break FIDO2. Do not freeze the rollout.
Read the article
WebAuthn Level 3 was proposed for W3C Recommendation in July 2026. Encryption key derivation, cross-domain credentials, and automatic list syncing are now first-class. Here is what changed.

Passkeys demo better than any login method ever shipped. Most deployments still cannot get anyone to turn them on. Both numbers are true.

March 2026 marks passwordless tipping point: Microsoft forces passkey migration, regulatory deadlines hit, and adoption surges to 69% of consumers.

87% of enterprises are deploying passkeys. This complete playbook covers architecture decisions, enrollment UX, recovery design, and the deployment
Ten passwordless CIAM platforms compared on verified September 2026 pricing and real passkey depth, plus three vendors to drop from an older shortlist.
Passwordless projects fail on enrolment and recovery, not cryptography. A phased checklist from baseline to deprecation, with the metrics that matter.
Synced passkeys for most users, device-bound FIDO2 keys for admins, push as a bridge. The full comparison on security, cost, assurance level and rollout.