My recent feature on passkeys attracted significant interest, and a number of the 1,100-plus comments raised questions about how the passkey system actually works and if it can be trusted. In response, I’ve put together this list of frequently asked questions to dispel a few myths and shed some light on what we know—and don’t know—about passkeys. This FAQ will be updated from time to time to answer additional questions of merit, so check back regularly. This author will not be monitoring or responding to comments going forward but can still be contacted through email.


More

ZDNet: Two years in, Google says passkeys now protect more than 400 million accounts

Google Account users have authenticated themselves using passkeys more than 1 billion times, but passwords…

Read More →

Google Blog: Passkeys, cross-account protection and new ways we’re protecting your accounts

For World Password Day, we’re sharing updates to passkeys across our products and sharing more…

Read More →

CNET: World Password Day: We’re closer to ditching this crackable tech

Passkeys promise to be a big help, but until they take hold, we all need…

Read More →