My recent feature on passkeys attracted significant interest, and a number of the 1,100-plus comments raised questions about how the passkey system actually works and if it can be trusted. In response, I’ve put together this list of frequently asked questions to dispel a few myths and shed some light on what we know—and don’t know—about passkeys. This FAQ will be updated from time to time to answer additional questions of merit, so check back regularly. This author will not be monitoring or responding to comments going forward but can still be contacted through email.


More

BangkokPost: Building trust in the age of data breaches

The Thai government should be considering industry-backed authentication such as FIDO to meet expectations for…

Read More →

BleepingComputer: Microsoft Azure AD FIDO2 Passwordless Sign-In in Public Preview

Microsoft has announced public preview support for FIDO2 security keys in Azure Active Directory to…

Read More →

Brian Madden: What I learned about identity management at Identiverse 2019

According to Brian Madden, FIDO2 and WebAuthn are the biggest buzz in identity today and…

Read More →