My recent feature on passkeys attracted significant interest, and a number of the 1,100-plus comments raised questions about how the passkey system actually works and if it can be trusted. In response, I’ve put together this list of frequently asked questions to dispel a few myths and shed some light on what we know—and don’t know—about passkeys. This FAQ will be updated from time to time to answer additional questions of merit, so check back regularly. This author will not be monitoring or responding to comments going forward but can still be contacted through email.


More

Security Boulevard: Is MFA a Security Illusion?

FIDO2 is a strong authentication standard that detects illegitimate MFA challenges and never presents them…

Read More →

Digital Trends: The Best USB Security Keys for 2021

SoloKeys, an indie developer who shines in creating open-source FIDO2 security keys, is ideal for…

Read More →

Semiconductor Engineering: Security Provisioning Moves Out of the Factory

Security credentials traditionally have been provisioned during chip manufacturing, often as a final part of…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.