My recent feature on passkeys attracted significant interest, and a number of the 1,100-plus comments raised questions about how the passkey system actually works and if it can be trusted. In response, I’ve put together this list of frequently asked questions to dispel a few myths and shed some light on what we know—and don’t know—about passkeys. This FAQ will be updated from time to time to answer additional questions of merit, so check back regularly. This author will not be monitoring or responding to comments going forward but can still be contacted through email.


More

J’ai Un Pote Dans La Com: MFA, Real Alternative to Physical Security Tokens?

Op-ed from Ping Identity around the limits of security tokens and the generalization of the…

Read More →

PhonAndroid: 3.2bn Hacked Login and Passwords Have Leaked: Check if Your Email is Part of It

This article discusses the COMB breach with some tips and advice to secure your identity…

Read More →

Raconteur: Holding Customers Accountable for Authentication

Andrew Shikiar, executive director at FIDO Alliance, a global consortium working on the creation of…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.