My recent feature on passkeys attracted significant interest, and a number of the 1,100-plus comments raised questions about how the passkey system actually works and if it can be trusted. In response, I’ve put together this list of frequently asked questions to dispel a few myths and shed some light on what we know—and don’t know—about passkeys. This FAQ will be updated from time to time to answer additional questions of merit, so check back regularly. This author will not be monitoring or responding to comments going forward but can still be contacted through email.


More

BankInfoSecurity: Congress hears ideas for battling ID theft

In a recent U.S. House Financial Services Committee hearing to explore ID security, Jeremy Grant suggested the…

Read More →

Forbes: Face It — Biometrics to be big in cybersecurity

With recent FIDO implementations from Google and Microsoft, strong authentication has seen big momentum –…

Read More →

The Inquirer: GitHub adds WebAuthn support for biometric and security key logins

GitHub now allows for login with WebAuthn, supporting security keys via Firefox, Chrome, macOS, Linux…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.