Get the latest tech news

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication


Explore how passkey implementation gaps undermine security when relying parties fail to validate the User Verified flag, reducing MFA to a single factor.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of passkey

passkey

Photo of novel attack surface

novel attack surface

Related news:

News photo

I replaced my Microsoft account password with a passkey - and you should, too

News photo

Apple, Microsoft, or Google: Whose platform authenticator rules our passkey future?

News photo

WhatsApp to Add Support for Passkey-Encrypted Backups