My recent feature on passkeys attracted significant interest, and a number of the 1,100-plus comments raised questions about how the passkey system actually works and if it can be trusted. In response, I’ve put together this list of frequently asked questions to dispel a few myths and shed some light on what we know—and don’t know—about passkeys. This FAQ will be updated from time to time to answer additional questions of merit, so check back regularly. This author will not be monitoring or responding to comments going forward but can still be contacted through email.


More

Tech Times: YubiKey 5.8 Ships Hardware-Backed Authorization for AI Agent Workflows

Touch a YubiKey to log in, and you’ve proven who you are. Touch a YubiKey…

Read More →

RSA and the FIDO Alliance Champion the Enterprise Passkey Revolution

In this joint briefing, RSA Security’s Jim Taylor and the FIDO Alliance’s Andrew Shikiar detailed the global transition away from legacy…

Read More →

OpenAI Will Gate Its Most Capable Cyber Models Behind a Physical Security Key

Access to OpenAI’s most cyber-capable AI models will soon require something no phishing email can…

Read More →


123332 Next

Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.